www-multivarka[.]com

This domain, www-multivarka.com, is flagged as a generic phishing site targeting users through a fraudulent imitation of the Wheel of Fortune brand. Analysis indicates the infrastructure is designed to deceive visitors into participating in fake prize schemes, likely harvesting personal data or credentials under the guise of a legitimate sweepstakes. No direct association with known cryptocurrency drainer kits or payment skimmers has been confirmed, though the use of evasive hosting practices suggests intent to prolong operational uptime. Infrastructure analysis reveals the domain was registered on February 21, 2026, through NiceNIC International Group Co., Limited, and currently resolves to the IP address 188.114.97.3. Detection metrics show a VirusTotal score of 2/95 security vendors flagging the domain as malicious, while it appears on one security blocklist. The site employs Cloudflare for content delivery and protection, including HTTP/3 and HSTS, which may complicate takedown efforts. The SSL certificate is issued by Google Trust Services, adding a superficial layer of legitimacy to the fraudulent endpoint. As of the latest assessment, www-multivarka.com has been taken offline, though residual risk remains due to the domain's recent registration and the use of bulletproof hosting techniques. Users who interacted with the site prior to its deactivation may still be vulnerable to follow-up phishing attempts or credential misuse. Network defenders are advised to monitor for related domains registered under the same registrar or resolving to the same IP range, as threat actors often reuse infrastructure across campaigns. Blocking the domain at the DNS level and reviewing logs for prior connections to 188.114.97.3 are recommended mitigation steps.