# plexwex.com — SUSPICIOUS

> plexwex.com posed as a blockchain casino to lure victims. Now offline, but previously flagged for phishing. Stay alert and protect your info.

## Summary
PhishDestroy identifies plexwex.com as a medium-risk phishing domain designed to deceive users with a fake online casino themed around blockchain technology. Classified under generic phishing threats, the domain aimed to trick victims into divulging sensitive data under the guise of a casino platform.

Supporting intelligence reveals that plexwex.com was registered on August 10, 2025, through Key-Systems GmbH and resolved to IP address 104.21.52.20. Although it appeared on one security blocklist and was flagged by 4 out of 95 VirusTotal security vendors, the Gridinsoft trust score rated it very low at 1 out of 100. The domain’s page title, "PLEXWEX | Play at the best online casino based on Blockchain," was used to entice users into a fraudulent environment.

Currently, plexwex.com has been taken offline, mitigating immediate risk. Users and organizations are advised to remain cautious of similar phishing attempts and to verify URLs carefully before engaging with blockchain or online gambling platforms. Updating security solutions and monitoring blocklists can help prevent exposure to such threats.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: dead (HTTP 403)
- Page title: PLEXWEX | Play at the best online casino based on Blockchain

## Domain Intelligence
- Registered: 2025-08-10 18:19:09
- Expires: 2026-08-10 18:19:09
- Registrar: Key-Systems GmbH
- Country: DE
- IP: 104.21.52.20
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: cartman.ns.cloudflare.com chan.ns.cloudflare.com
- SSL Issuer: none

## Detection Status
- VirusTotal: 4 vendors flagged
  Vendors: ["ADMINUSLabs", "alphaMountain.ai", "Forcepoint ThreatSeeker", "Fortinet"]
- Google Safe Browsing: clean
- Blocklists: 1 hits
  Lists: ["PhishDestroy"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019a410c-76be-7315-99b3-86a8b3371cfc.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/59f063f3-94ed-4cf6-83cd-2a9fa2c460ea
- PhishDestroy: https://phishdestroy.io/domain/plexwex.com/
- LLM endpoint: https://phishdestroy.io/domain/plexwex.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/plexwex.com/
Last updated: 2026-03-19