negowex[.]com
Verifica phishing e sicurezza per negowex.com
“Negowex: Most Popular Online Crypto Casino Based on Blockchain”
negowex.com — Contenuto non disponibile (HTTP 502). Simulazione del marchio: Genericcrypto; Tipo di truffa: Brand Impersonation. Riepilogo delle prove: VirusTotal 14 detections (engine total unavailable) (ADMINUSLabs, alphaMountain.ai, Bfore.Ai PreCrime, BitDefender, Chong Lua Dao); URLQuery 2 alerts; URLScan malicious verdict; PhishDestroy score 100/100. Registrar: MAT BAO.
L’analisi dettagliata di PhishDestroy AI resta in inglese per preservare il rapporto forense originale.
Evidence Analysis
The domain negowex.com has been identified as a brand impersonation threat specifically targeting users of cryptocurrency-based gambling platforms. Analysis confirms this domain mimics legitimate crypto casino services, presenting itself as a blockchain-based online casino. As of the latest assessment, the domain has been taken offline, though prior activity remains a concern for historical exposure. Infrastructure analysis reveals that negowex.com was registered on December 07, 2025, through MAT BAO CORPORATION and resolved to the IP address 188.114.96.3. The domain is flagged by 14 of 95 security vendors on VirusTotal, indicating a high likelihood of malicious intent. Additional technical indicators include a Gridinsoft trust score of 1/100 and a Scamadviser trust score of 1/100, both reflecting extreme risk. The domain appears on one security blocklist and was previously blocked by PhishDestroy. Detected technologies include Twitter Ads, Facebook Pixel, and Cloudflare, suggesting an attempt to amplify reach through social media and evade detection via proxy services. Current status confirms the domain is offline, reducing immediate risk of active exploitation. However, historical data and residual threats remain. Organizations and individuals are advised to block the domain and associated IP address (188.114.96.3) at the network level. Users who may have interacted with negowex.com should monitor cryptocurrency wallets for unauthorized transactions and revoke any connected smart contract approvals. Security teams should update detection rules to include this domain and its indicators of compromise (IOCs) in threat intelligence feeds. Vigilance is recommended for similar domains registered through the same registrar or resolving to the same IP range.
Copertura dei dati14 recorded checks
Indicatori di sicurezza
Informazioni sulla sicurezza di rete
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Hagezi Threat Feed | negowex.com |
malicious | Sinkholed |
| DNS4EU | negowex.com |
malicious | Sinkholed |
Pipeline di risposta alle minacce
Stato della lista di blocco pubblica
Acquisizione salvata
Analisi dei domini
Dettagli tecniciDNS, SAN SSL, timestamp
ICANN OVERSIGHT
Accreditamento e contesto RAA
Accreditamento e contesto RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Tecnologie · 3 identified
Twitter Ads is an advertising platform for Twitter 'microblogging' system.
ads.twitter.com Confidenza al 100%Facebook pixel is an analytics tool that allows you to measure the effectiveness of your advertising.
facebook.com Confidenza al 100%Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
www.cloudflare.com Confidenza al 100%Analisi di VirusTotal
Analisi delle prestazioni del sito
Google PageSpeed Insights — mobile performance audit of negowex.com · checked Jun 26, 2026
Dati e relazioni esterneIndependent lookups and source reports
PD-20260505-8864FA Recipient: compliance_abuse@webnic.cc Victim safety and official reportingImmediate actions and verified reporting channels
Se hai inserito credenziali dell'account, informazioni personali o di pagamento oppure hai scaricato un file da questo dominio, agisci immediatamente. Di seguito sono riportate le risorse per aiutarti a segnalare l'incidente e proteggerti.
Segnalalo alle autorità locali
Seleziona il tuo Paese per ottenere contatti ufficiali del crimine informatico o creare una bozza di reclamo →.