zh-cn-winnersports[.]com

This domain, zh-cn-winnersports.com, is flagged as a high-risk phishing site targeting users through brand impersonation of a purported sports betting platform. Analysis of the page title, 赢家体育-亚洲顶尖综合体育平台 (translated as 'Winner Sports - Asia's Top Comprehensive Sports Platform'), indicates an attempt to mimic legitimate gambling or betting services to deceive users into submitting credentials or financial information. No direct evidence of a crypto drainer kit was observed, but the domain exhibits characteristics consistent with credential harvesting and fraudulent transaction facilitation. Infrastructure analysis reveals multiple concrete technical indicators. The domain resolves to IP address 201.5.85.210, hosted in Hong Kong under AS134175 (SH2206). It was registered on May 02, 2026, through GoDaddy.com, LLC, a common registrar for both legitimate and malicious domains. VirusTotal detection shows 15 out of 95 security vendors flagging the domain as malicious. The domain appears on one security blocklist, specifically PhishDestroy, and is not currently listed on Google Safe Browsing. The SSL certificate is issued by Let's Encrypt (R12), a frequently used provider for both benign and malicious sites due to its free and automated issuance process. As of the latest assessment, zh-cn-winnersports.com remains active and operational. The domain's infrastructure, combined with its recent creation date and lack of widespread blocklisting, suggests it may still be in the early stages of its malicious campaign. Users are advised to block the domain at the network level and avoid interaction with any associated URLs or IP addresses. Organizations should monitor for credential submissions or financial transactions originating from this domain and consider implementing additional authentication measures for users who may have engaged with the site. The remaining risk is classified as high due to the domain's active status and targeted impersonation of a high-value service sector.