55wingob[.]com

Analysis indicates that the domain 55wingob.com is actively hosting a high-risk phishing campaign targeting lottery-themed fraud as of July 12, 2026. The domain was registered on April 16, 2026, through NameSilo, LLC, and currently resolves to the IP address 188.114.96.3, which is associated with CloudFlare, Inc. in Canada. Infrastructure analysis reveals the use of Cloudflare nameservers (finley.ns.cloudflare.com and sandra.ns.cloudflare.com), a common tactic to obscure hosting origins and evade takedowns. The SSL certificate is issued by Google Trust Services (WE1), which does not inherently validate the legitimacy of the site's content. The page title explicitly references 'lottery,' suggesting the domain is designed to impersonate a legitimate lottery or prize-giveaway service. However, the exact content and mechanics of the scam remain unconfirmed, as no further details about the phishing kit or targeted brand are available in the provided intelligence. The domain is flagged by at least one security blocklist (PhishDestroy) and has been detected by 2 of 94 security vendors on VirusTotal, indicating a low but non-zero level of detection. Gridinsoft assigns the domain a trust score of 0/100, further corroborating its malicious classification. Defenders should prioritize blocking access to 55wingob.com at the DNS or network level, particularly in environments where lottery or prize-related scams pose a heightened risk. Monitoring for related domains registered through the same registrar or utilizing similar Cloudflare infrastructure may aid in identifying additional threats. Given the domain's recent registration and active status, continued vigilance is recommended, as the campaign may evolve or expand its targeting.