weonax[.]com
“Weonax: Most Popular Online Crypto Casino Based on Blockchain”
Evidence Summary
This domain, weonax.com, is flagged for brand impersonation targeting X.com, presenting a high-risk scenario for users encountering fraudulent online gambling services. The site masquerades as a blockchain-based crypto casino, a common tactic to lure victims into disclosing sensitive credentials or transferring cryptocurrency under false pretenses. Infrastructure analysis reveals the domain is designed to exploit trust in established brands, potentially leading to financial loss or account compromise for unsuspecting visitors. Evidence supporting this assessment includes multiple technical indicators. The domain was registered on December 03, 2025, through Metaregistrar BV, a registrar frequently associated with high-risk registrations. It resolves to the IP address 188.114.96.3, hosted on Cloudflare's infrastructure (AS13335), which is often leveraged to obscure malicious activity. Notably, the domain lacks an SSL certificate, increasing the risk of data interception during transmission. Security vendors have flagged weonax.com at a concerning rate, with 17 out of 95 engines on VirusTotal detecting malicious activity. Additionally, the domain appears on one security blocklist, further corroborating its elevated risk status. Users who visited weonax.com should take immediate action to mitigate potential risks. First, revoke any credentials or cryptocurrency wallets that may have been exposed during interaction with the site. Monitor financial accounts and crypto wallets for unauthorized transactions, as attackers may attempt to exploit stolen information. If personal or financial data was entered, consider implementing credit monitoring or fraud alerts as a precaution. Given the domain's current offline status, users should remain vigilant for similar impersonation attempts, particularly those leveraging blockchain or crypto-related themes to appear legitimate. Organizations should update their blocklists to include weonax.com and its associated indicators of compromise to prevent future exposure.
Data Coverage
Security Signals
Threat Response Pipeline
Blocklist coverage
10 monitored external feeds · stored snapshot Aug 13, 2026
10 monitored external feeds No match
Detection timeline
-
Cloudflare Radar
Cloudflare Radar scan stored · Open scan
Stored Capture
Domain Intelligence
Technical detailsDNS, TLS names and timestamps
ICANN OVERSIGHT
Accreditation and RAA context
Accreditation and RAA context
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
VirusTotal Analysis
Were You Affected by This Site?
If credentials, payment data, or files were exposed, report the incident immediately. Change affected passwords, revoke active sessions, and scan the device.
Report to Your Local Authorities
Select your country to get official cybercrime contacts, or create a complaint draft →.
Check Any Domain
Threat analysis using stored blocklist, WHOIS, DNS, and public scan evidence
Scan NowReport Phishing
Submit suspicious domains to our threat database — protect the community
ReportLive Threat Feed
Recent phishing reports and observed availability changes
MonitorStay Informed, Stay Safe
Monitor live threats or contest this listing if you believe it's a false positive