luckywinner777[.]info

Analysis dated July 23, 2026 identifies luckywinner777.info as an active crypto‑scam infrastructure that was taken offline shortly after detection. The site presented the page title “Luckywinner777: Most Popular Online Crypto Casino Based on Blockchain,” indicating a fraudulent attempt to lure victims into a cryptocurrency gambling scheme. Registration was performed through Web Commerce Communications Limited, and the domain resolved to IP address 188.114.96.3, which is hosted in the United States under AS13335 (Cloudflare, Inc.). No SSL certificate was observed, meaning the site operated over plain HTTP, a common characteristic of low‑trust phishing deployments.

VirusTotal recorded 14 detections out of 93 scanned security vendors, and the domain appears on a single external blocklist. PhishDestroy confirmed the domain as malicious and subsequently forced it offline. Additional telemetry shows the site employed the publicly known “Gambler Scam” phishing kit and received a Gridinsoft trust score of 1 out of 100, reflecting an extremely low reputation.

While the domain is currently offline, defenders should continue to block the associated IP 188.114.96.3, monitor any future DNS changes, and add the domain to internal blacklists. Continuous observation of Cloudflare‑hosted assets linked to this IP is recommended, as threat actors often repurpose the same hosting infrastructure for new campaigns. The limited blocklist presence suggests that broader threat‑intel sharing may be required to raise awareness across security communities.