last-word-wins[.]com

Analysis of the domain last-word-wins.com indicates it is an active phishing site classified as a crypto drainer, currently under investigation. The domain was registered on March 29, 2026, through Key-Systems GmbH and resolves to the IP address 66.241.125.102, hosted by Fly.io, Inc. in France. The site returns an HTTP 200 status, suggesting it is operational, and its page title, 'Last Word Wins - On-Chain Competitive Messaging Game,' aligns with the reported scam type targeting cryptocurrency users. Infrastructure analysis reveals the use of Node.js, Vue.js, and Nuxt.js frameworks, alongside hosting on Fly.io, which may aid defenders in identifying related campaigns. The domain is flagged on one security blocklist and has been assigned a trust score of 0/100 by Gridinsoft, reinforcing its malicious classification. While no detections were reported by the 94 vendors that scanned the domain on VirusTotal, the absence of detections does not confirm safety, and the domain remains active as of July 12, 2026. Nameservers ns1.hostingpalvelu.fi and ns2.hostingpalvelu.fi are associated with the domain, and it employs a Let's Encrypt SSL certificate (E7), which is common among both legitimate and malicious sites. Defenders should treat this domain as a confirmed threat, particularly in environments where cryptocurrency transactions occur. Monitoring for connections to 66.241.125.102 and the associated nameservers may help identify compromised systems or further phishing activity. Given the domain's recent registration and active status, continued vigilance is advised, and blocking access at the network level is recommended until further analysis confirms its takedown or reclassification.