# weumox.com — MALICIOUS

> weumox.com impersonates Base in a crypto drainer scam. VirusTotal shows 8/95 detections. Check the full report.

## Summary
PhishDestroy identifies weumox.com as a high-risk brand impersonation domain actively masquerading as Base, a prominent blockchain-based platform. This domain is specifically designed to deceive users into believing it is an official crypto casino operating on blockchain technology, as evidenced by the page title 'Weumox: Most Popular Online Crypto Casino Based on Blockchain.' While no drainer kit artifacts were observed in the available telemetry, the domain's structure and thematic content strongly suggest it is part of a cryptocurrency-themed phishing campaign aimed at siphoning digital assets under the guise of a legitimate gaming or financial service.  

This domain exhibits several malicious indicators confirmed by multiple security vendors. weumox.com resolves to IP address 188.114.96.3 and was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED. The domain was created on April 11, 2026, and currently holds a VirusTotal detection score of 8 out of 95 security vendors, indicating partial but not universal recognition as malicious. It utilizes a Let's Encrypt SSL certificate, which does not confer legitimacy, and remains unblocked by Google Safe Browsing as of the latest assessment. Additionally, this domain has been associated with deceptive cryptocurrency services targeting Base users, reinforcing its role in active phishing operations.  

As of the most recent analysis, weumox.com remains active and continues to operate without interruption. Immediate defensive actions include blocking the domain at the network and DNS levels and flagging the associated IP (188.114.96.3) in security controls. Users and organizations are strongly advised to avoid interacting with this domain or any linked pages. The persistent activity and low detection rate—coupled with the domain's recent creation—highlight a significant ongoing risk, particularly to individuals engaged in cryptocurrency transactions involving Base or similar ecosystems. Enhanced monitoring of blockchain-related domains using similar naming conventions is recommended to prevent further exploitation.

## Threat Details
- Verdict: MALICIOUS
- Site status: alive (HTTP ?)
- Target brand: Base
- Page title: Weumox: Most Popular Online Crypto Casino Based on Blockchain

## Domain Intelligence
- Registered: 2026-04-11 18:40:03
- Registrar: NICENIC INTERNATIONAL GROUP CO., LIMITED
- IP: 188.114.96.3

## Detection Status
- VirusTotal: 8 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/8ae26be2-8aae-4c27-b023-8723528d750e
- PhishDestroy: https://phishdestroy.io/domain/weumox.com/
- LLM endpoint: https://phishdestroy.io/domain/weumox.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/weumox.com/
Last updated: 2026-04-14