1778winoi[.]com

This domain, 1778winoi.com, is flagged as an active credential harvesting phishing site designed to impersonate the legitimate gambling platform 1778win.com. Analysis indicates the domain presents a fraudulent login interface under the page title '1778win - Plataforma Oficial -1778win.com,' suggesting an intent to deceive users into submitting account credentials. No evidence of a drainer kit or cryptocurrency wallet interaction was observed, but the site’s structure aligns with typical credential theft campaigns targeting online gambling users. Infrastructure analysis reveals the domain was registered on October 02, 2025, through West263 International Limited, a registrar frequently associated with high-risk domains. It resolves to the IP address 188.114.97.3, which has been linked to other phishing infrastructure. Detection metrics show 15 out of 95 security engines on VirusTotal flag the domain as malicious, while it appears on two independent security blocklists. The SSL certificate is issued by Google Trust Services, providing a false sense of legitimacy, and the domain holds a Gridinsoft trust score of 0/100, further confirming its malicious nature. As of the latest assessment, 1778winoi.com remains active and continues to pose an elevated risk to users. Response actions include its inclusion in multiple blocklists and detection by endpoint protection systems. However, the domain’s recent registration and lack of widespread takedown efforts suggest it may persist in operation. Users are advised to avoid interaction, verify URLs through official sources, and employ browser-based phishing filters to mitigate exposure. Organizations should update blocklists and monitor for credential reuse attempts originating from this infrastructure.