1bigwin[.]click

The domain 1bigwin.click was registered on September 06, 2025 through Web Commerce Communications Limited and resolves to the IP address 188.114.97.3, which belongs to AS13335 Cloudflare, Inc. in the United States. The site’s page title, "1bigwin: Most Popular Online Crypto Casino Based on Blockchain," indicates a crypto‑casino lure. No SSL certificate is presented, meaning the site does not provide encrypted HTTPS connections. The domain appears on one security blocklist and has been cited in two AlienVault OTX threat‑intel pulses.

VirusTotal scans show that twelve of ninety‑three security vendors flagged the domain as malicious. Reputation services assign extremely low trust scores—Scamadviser 1/100 and Gridinsoft 1/100—reinforcing the malicious assessment. The infrastructure uses Cloudflare name servers (isabel.ns.cloudflare.com and rajeev.ns.cloudflare.com). Analysis of the payload suggests the use of a Gambler Scam phishing kit, classified as a crypto scam.

The domain is currently taken offline and has been blocked by PhishDestroy. While the exact content of the page has not been captured, the available indicators—blocklist presence, multiple vendor detections, low trust scores, and the Gambler Scam kit—provide sufficient evidence to treat the domain as a high‑risk phishing vector targeting cryptocurrency enthusiasts. Defenders should immediately block 1bigwin.click and its associated IP address, add the domain to internal deny lists, monitor Cloudflare name‑server activity for similar registrations, and watch for other domains employing the same Gambler Scam kit. Continuous threat‑intel feeds should be consulted for any re‑appearance of the infrastructure.