winix[.]cc

The domain winix.cc was registered on December 09, 2025 through Web Commerce Communications Limited. The active page title retrieved prior to takedown reads “Winix: Most Popular Online Crypto Casino Based on Blockchain,” which aligns with the classified scam type of a crypto‑focused phishing operation. The site employed the Gambler Scam phishing kit, a known template used to lure victims into fraudulent cryptocurrency gambling environments. No TLS certificate was observed, indicating that the site was served over plain HTTP, which further lowers trustworthiness.

Infrastructure analysis shows the domain resolves to the IP address 172.67.149.121, part of the Cloudflare network (AS13335) located in the United States. The domain is currently offline, but its historical presence on at least one security blocklist and the fact that PhishDestroy has explicitly blocked it demonstrate that defensive feeds have already flagged it. VirusTotal scans recorded 16 positive detections out of 93 vendor submissions, reinforcing the malicious classification. Additional reputation data from Gridinsoft assigns a trust score of 1 out of 100, effectively indicating a near‑certain malicious profile.

The authoritative name servers listed are cecelia.ns.cloudflare.com and steven.ns.cloudflare.com, both standard Cloudflare resolvers, which do not provide further attribution. Defenders should continue to block the domain and its associated IP address at perimeter and endpoint layers, add winix.cc to internal blacklists, and monitor for any future re‑registration or use of the same Cloudflare IP range. Because the site is offline, dynamic content analysis is unavailable; however, the combination of registrar information, page title, phishing kit identification, low trust score, and multiple vendor detections provides sufficient evidence to treat winix.cc as a confirmed crypto phishing threat.