winels[.]com

Analysis of winels.com indicates this domain is a confirmed phishing site linked to the Gambler Scam phishing kit, currently offline as of July 24, 2026. The domain was registered on February 23, 2026, through NiceNIC International Group Co., Limited, and resolved to IP address 107.180.48.200, hosted on AS400754 (GoDaddy.com, LLC) in the United States. Infrastructure analysis reveals the domain was actively blocked by PhishDestroy and appears on at least one security blocklist, with AlienVault OTX recording its presence in two threat intelligence pulses. Two of 95 security vendors on VirusTotal flagged the domain, though the exact nature of their detections remains unverified.

Nameservers are set to ns1.nameserverhub.com and ns2.nameserverhub.com, a configuration consistent with domains used in phishing campaigns. The SSL certificate is issued to 'Internet Widgits Pty Ltd,' a generic identifier often associated with low-reputation or disposable domains. While the domain is currently offline, defenders should treat it as high-risk due to its association with a known phishing kit, prior blocklist inclusion, and hosting on infrastructure frequently exploited for fraud.

Organizations are advised to monitor for any re-emergence of this domain or similar patterns in DNS, SSL, or hosting provider logs. The exact content of the phishing pages is not yet analysed, but the Gambler Scam classification suggests targeting of online gambling or betting credentials. No further brand impersonation details are available at this time.