woonex[.]cc

This domain, woonex.cc, is identified as a phishing infrastructure impersonating a cryptocurrency-based online casino. The site presents itself as 'Woonex: Most Popular Online Crypto Casino Based on Blockchain,' targeting users of blockchain gambling platforms. Analysis indicates no associated crypto drainer kit at this stage, but the domain employs brand impersonation tactics to deceive visitors into engaging with fraudulent services or disclosing sensitive credentials. Infrastructure analysis reveals the following technical indicators: the domain resolves to IP address 172.67.205.177, hosted on Cloudflare’s network (AS13335) in the United States. It was registered on November 27, 2025, through PDR Ltd. d/b/a PublicDomainRegistry.com. The domain lacks an SSL certificate, increasing the risk of interception or tampering. VirusTotal reports 19 out of 95 security vendors flagging woonex.cc as malicious. The domain appears on one security blocklist, and no Google Safe Browsing (GSB) detections were recorded at the time of analysis. The domain is currently offline, mitigating immediate user exposure. However, residual risk persists due to the domain’s recent registration and the potential for re-activation or migration to alternative infrastructure. Organizations and individuals are advised to block the domain and its resolving IP at the network level. Users should verify the legitimacy of crypto gambling platforms by cross-referencing official domains and avoiding unsecured (HTTP-only) connections. Monitoring for similar impersonation attempts targeting blockchain-based services is recommended.