ledxboom[.]com

The domain ledxboom.com was observed supporting a cryptocurrency‑based gambling fraud. The site was registered on April 28 2025 through NameSilo, LLC and is hosted on a Swiss address (country CH) belonging to AS42624 Global‑Data System IT Corporation. DNS resolution points to IP 69.5.189.57, which is listed on the PhishDestroy blocklist and appears on one additional security blocklist. No TLS certificate was presented, leaving the HTTP service unencrypted. The page title returned by the server reads “LEDXBOOM | Play at the best online casino based on Blockchain”, consistent with the “Gambler Scam” kit identified in the intelligence feed and the classification as a crypto scam.

Threat intelligence sources corroborate the malicious nature of the host. AlienVault OTX includes the domain in a single pulse, and two of ninety‑five VirusTotal scanners flagged the domain as malicious. Gridinsoft assigned a trust score of 0 / 100, indicating complete lack of confidence. The domain is currently taken offline, which limits immediate exposure but does not remove the underlying infrastructure.

Uncertainty remains regarding the current activity of the associated IP address and whether additional sub‑domains share the same payload. No SSL certificate or HSTS policy can be examined, and the content of the landing page has not been captured beyond the title. Defenders should continue to block the domain and its IP at perimeter devices, monitor the nameservers (ns1‑ns4.nameserverhub.com) for future changes, and add the host to internal threat‑intel feeds. Periodic re‑resolution of the IP and renewed VirusTotal scans are recommended to detect any re‑activation.