nzwin777[.]com

Analysis of nzwin777.com indicates a crypto-centric phishing domain operating as a fraudulent online casino. The domain was registered on November 5, 2025, through Dominet (HK) Limited and currently resolves to IP 172.67.131.239, hosted on Cloudflare's network (AS13335) in the United States. No SSL certificate is present, increasing exposure to interception risks. The page title, 'Nzwin777: Most Popular Online Crypto Casino Based on Blockchain,' explicitly identifies the site as a gambling platform targeting cryptocurrency users, aligning with the classified scam type 'Crypto Scam' and phishing kit 'Gambler Scam.' Detection data reveals mixed vendor confidence: 13 of 95 security engines on VirusTotal flagged the domain at the time of assessment.

The domain appears in two AlienVault OTX threat intelligence pulses and is blocked by PhishDestroy, confirming its presence on at least one security blocklist. Gridinsoft assigns a trust score of 1/100, further corroborating malicious intent. Infrastructure analysis shows Cloudflare nameservers (ALI.NS.CLOUDFLARE.COM, DONOVAN.NS.CLOUDFLARE.COM), a common pattern among phishing domains leveraging Cloudflare's proxy services to obscure origin servers. Defenders should treat this domain as an active crypto scam vector.

Block resolution at DNS level and monitor for related domains using the same registrar or hosting provider. The absence of SSL and use of Cloudflare proxies suggest potential for credential harvesting or wallet redirection, though specific payloads remain unconfirmed. As the domain is currently offline, further forensic analysis may be limited, but historical WHOIS and passive DNS data should be reviewed for additional indicators.