# berowex.com — SUSPICIOUS

> PhishDestroy flags berowex.com for brand impersonation targeting generic gambling with blockchain casino claims. Domain now offline.

## Summary
PhishDestroy identifies berowex.com as a domain engaged in brand impersonation, specifically targeting the generic gambling industry. The domain’s page title, "BEROWEX | Play at the best online casino based on Blockchain," suggests attempts to lure users under the guise of a blockchain-based casino platform.

Technical analysis reveals the domain was registered on August 7, 2025, through Key-Systems GmbH and resolved to IP 198.18.0.68. It appeared on one security blocklist and was flagged by three security vendors on VirusTotal, indicating moderate suspicion. These indicators point towards potential phishing or fraudulent activities aimed at gambling enthusiasts.

Currently, berowex.com has been taken offline, mitigating immediate risk. However, its medium-risk classification underlines the importance of continuous monitoring for similar brand impersonation attempts in the gambling sector to protect users from deceptive schemes.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: dead (HTTP 403)
- Page title: BEROWEX | Play at the best online casino based on Blockchain

## Domain Intelligence
- Registered: 2025-08-07 18:49:59
- Expires: 2026-08-07 18:49:59
- Registrar: Key-Systems GmbH
- Country: DE
- IP: 172.67.192.165
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: khalid.ns.cloudflare.com sunny.ns.cloudflare.com
- SSL Issuer: none

## Detection Status
- VirusTotal: 3 vendors flagged
  Vendors: ["alphaMountain.ai", "Fortinet", "SOCRadar"]
- Google Safe Browsing: clean
- Blocklists: 1 hits
  Lists: ["PhishDestroy"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019a410c-75dc-73b7-bf8c-1e0b9fe54e38.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/4eb244b7-19c6-470f-887b-12704618b959
- PhishDestroy: https://phishdestroy.io/domain/berowex.com/
- LLM endpoint: https://phishdestroy.io/domain/berowex.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/berowex.com/
Last updated: 2026-03-19