diamond-win[.]vip

This domain, diamond-win.vip, is flagged as a crypto scam targeting users through a fraudulent online casino theme. Registered on February 21, 2026, the domain was operational until recently taken offline. Infrastructure analysis reveals it resolved to 172.67.189.70, hosted on Cloudflare's network (AS13335), a common obfuscation tactic for malicious domains. The page title, 'Diamond-win: Most Popular Online Crypto Casino Based on Blockchain,' explicitly indicates its fraudulent intent to impersonate a legitimate gambling platform, though no specific legitimate brand is confirmed as the target. Detection data shows the domain appears on at least one security blocklist, and 12 of 93 security vendors on VirusTotal flagged it as malicious.

The domain was classified under the 'Gambler Scam' phishing kit, suggesting a standardized attack framework likely reused across multiple campaigns. The SSL certificate is issued by WE1, a low-assurance provider often utilized in short-lived phishing operations. Gridinsoft assigned a trust score of 0/100, reinforcing its high-risk classification. Defenders should treat this domain as confirmed malicious and prioritize blocking it at the DNS and proxy levels.

Given its association with a known phishing kit, related infrastructure (e.g., IP, registrar, or certificate patterns) may warrant further investigation for additional compromised domains. The domain's current offline status does not preclude future reactivation; monitoring for re-emergence is recommended. No evidence links this domain to a specific legitimate brand, so brand-specific protections are not applicable. The exact content and user interaction flow remain unanalyzed, but the available indicators align with a crypto-based fraud scheme.