# nozewin197.pro — MALICIOUS

> PhishDestroy flags nozewin197.pro as a live crypto-drainer site (5/95 VirusTotal detections). Visitors risk irreversible wallet theft.

## Summary
PhishDestroy identifies nozewin197.pro as an active crypto-drainer domain designed to steal cryptocurrency from unwary visitors. When loaded, the page silently prompts users to connect their wallet under the guise of a reward or verification step. Any approval or transaction signature can result in the immediate transfer of all digital assets to attacker-controlled wallets, often without possibility of recovery.  This domain was flagged after VirusTotal returned 5 detections out of 95 security vendors on March 21, 2026. The domain resolves to IP 66.198.225.39 and uses a Let’s Encrypt SSL certificate for added credibility. It was registered through Fewmoretaps OU, doing business as Trustname.com, on the same day it went live.  If you visited nozewin197.pro, immediately revoke any wallet connections in your browser or wallet extension settings. Check recent transaction history for unauthorized transfers. Do not approve any new connection requests and consider transferring remaining funds to a clean wallet. Report the domain on PhishDestroy and run a malware scan on your device to rule out further compromise.

## Threat Details
- Verdict: MALICIOUS
- Site status: unknown (HTTP ?)
- Page title: nozewin197.pro

## Domain Intelligence
- Registered: 2026-03-21 19:47:24
- Registrar: Fewmoretaps OU d/b/a Trustname.com
- IP: 66.198.225.39

## Detection Status
- VirusTotal: 5 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/68701f22-04b6-4765-9cbb-104c3ea14c76
- PhishDestroy: https://phishdestroy.io/domain/nozewin197.pro/
- LLM endpoint: https://phishdestroy.io/domain/nozewin197.pro/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/nozewin197.pro/
Last updated: 2026-04-13