casinowex[.]bet

This domain, casinowex.bet, is identified as an active crypto wallet drainer phishing site designed to harvest wallet credentials through fraudulent casino-themed lures. Analysis indicates the infrastructure is specifically engineered to mimic legitimate gambling platforms, likely targeting users of decentralized finance (DeFi) protocols and cryptocurrency wallets. No direct brand impersonation has been confirmed, but the site employs common drainer kit behaviors, including credential interception and automated transaction redirection to attacker-controlled addresses. Infrastructure analysis reveals the following technical indicators: the domain resolves to IP address 104.21.91.48 and was registered on May 24, 2026, through Globaldomaingroup. It is currently flagged by 13 out of 95 security vendors on VirusTotal and appears on three independent security blocklists. The domain is also blocked by multiple wallet security providers and maintains an active SSL certificate issued by Let's Encrypt (serial number E7). Google Safe Browsing (GSB) has not yet classified this domain, but additional threat intelligence platforms have marked it as malicious. As of the latest assessment, casinowex.bet remains active and accessible, posing a high risk to users who interact with its content. Response actions by security providers include widespread blocking at the DNS and application layers, though the domain continues to resolve. The remaining risk is elevated due to the domain's recent registration, persistent hosting, and the use of encryption to lend an appearance of legitimacy. Users are advised to avoid interaction with the domain, and organizations should implement network-level blocking to prevent credential theft and financial loss.