m[.]zcw520[.]com

The domain m.zcw520.com was registered on April 11, 2026 through OwnRegistrar, Inc. and is currently active, returning HTTP 200 responses over a TLS certificate issued by Let’s Encrypt (R12). DNS resolution points to IP 156.227.96.78, which belongs to AS139880 OWGELS INTERNATIONAL CO., LIMITED and is geolocated in Hong Kong. The host runs Nginx with HSTS enabled and serves a page titled "中彩网官网首页 - 官方门户入口 · 最全彩票开奖结果". Front‑end assets are built on Bootstrap and the site includes Baidu Analytics tracking. The nameservers listed are ns1.domainnamedns.com and ns2.domainnamedns.com, with a null entry observed. Reputation scoring from Gridinsoft rates the domain 0/100, and it appears on a single blocklist (PhishDestroy). VirusTotal scans show 19 of 91 security vendors flagging the domain as malicious, reinforcing the high‑risk classification. The listed scam type is credential phishing, indicating attempts to harvest user credentials. While the page content beyond the title has not been publicly analysed, the combination of a recent registration, low trust score, vendor detections, and active blocklist listing suggests a purposeful phishing operation. Defenders should block DNS resolution to 156.227.96.78, monitor outbound traffic for connections to this host, and update intrusion‑detection signatures with the observed TLS fingerprint and HTTP headers. Additional investigation of the site’s payload and any credential‑harvesting forms is recommended to fully characterize the threat vector.