zumowex[.]com

This domain, zumowex.com, is actively engaged in brand impersonation targeting the crypto gambling sector. Analysis indicates the site mimics legitimate decentralized Web3 gambling platforms, specifically presenting itself as a 'Decentralized Web3 Gambling Site with Provable Trust.' The threat type is classified as brand_impersonation, with a focus on luring users into fraudulent crypto casino transactions or credential harvesting. No explicit drainer kit signatures have been identified at this time, though the infrastructure aligns with known phishing patterns in the gambling vertical.

Technical indicators reveal multiple red flags. The domain was registered on June 27, 2026, through Fewmoretaps OU d/b/a Trustname.com, a registrar frequently associated with high-risk domains. It resolves to the IP address 104.21.28.135, a Cloudflare-hosted endpoint commonly used to obfuscate malicious infrastructure. VirusTotal detection metrics show 12 out of 95 security vendors flagging the domain as malicious, while Google Safe Browsing (GSB) has not yet listed it as a threat. SSL certificate analysis confirms the use of Google Trust Services, which, while legitimate, does not mitigate the underlying fraudulent intent. No additional blocklist entries were identified beyond the VirusTotal detections.

As of the latest assessment, zumowex.com remains active and unmitigated, posing a high risk to users. The domain’s infrastructure and impersonation tactics suggest a persistent threat, likely targeting individuals seeking crypto gambling opportunities. Recommended response actions include immediate blocking of the domain and IP at the network level, as well as user education to recognize brand impersonation red flags in the gambling sector. Despite partial detection by security vendors, the domain’s continued operation underscores the need for proactive monitoring and enforcement against similar threats.