texbiom[.]pro

This domain, texbiom.pro, is currently active and classified as a high‑risk generic phishing operation with a crypto‑scam focus. The site presents the page title “TEXBIOM | Play at the best online casino based on Blockchain,” indicating an attempt to lure victims into a gambling‑related cryptocurrency scheme. Infrastructure analysis shows the domain resolves to IP address 69.5.189.57, which is registered to ASN 42624 (Global‑Data System IT Corporation) and geolocated in Switzerland. Registration was performed through SC‑GLOBAL‑DATA‑20040120, and the domain is served by the nameservers ns1.nameserverhub.com, ns2.nameserverhub.com, ns3.nameserverhub.com, and ns4.nameserverhub.com. The web server returns HTTP 200 and uses a Let’s Encrypt R13 certificate, but the Gridinsoft trust score is 1 / 100, reflecting a severely low reputation. The domain appears on one security blocklist and is actively blocked by PhishDestroy. VirusTotal analysis reports three detections out of ninety‑five scanners, confirming malicious activity. While the page content has not been examined directly, the combination of a gambling‑oriented title, a crypto‑scam classification, and the presence of the “Gambler Scam” phishing kit strongly suggests credential‑harvesting or financial fraud targeting cryptocurrency users. Defenders should consider immediate blocking of texbiom.pro at perimeter firewalls and DNS filters, monitor outbound connections to the associated IP address, and add the domain to internal threat intelligence feeds. Ongoing observation is advised to detect any changes in hosting or additional malicious payloads.