promwex[.]com

This domain, promwex.com, is flagged as a brand impersonation threat targeting online crypto casino and gambling platforms. Analysis of the site’s infrastructure and content reveals an attempt to mimic legitimate blockchain-based gambling services, as evidenced by the page title 'Promwex: Most Popular Online Crypto Casino Based on Blockchain.' The domain does not appear to deploy a crypto drainer kit but instead focuses on deceiving users into engaging with fraudulent gambling services, potentially leading to financial loss or credential compromise through social engineering tactics. Technical indicators confirm the elevated risk associated with this domain. VirusTotal detection metrics show 12 out of 95 security vendors flagging promwex.com as malicious. The domain was registered on November 3, 2025, through Dominet (HK) Limited, a registrar frequently associated with high-risk domains. Infrastructure analysis reveals resolution to the IP address 188.114.96.3, hosted under AS13335 (Cloudflare, Inc.), a common obfuscation tactic to evade geofencing or IP-based blocking. The domain appears on one security blocklist and lacks an SSL certificate, further indicating its fraudulent nature. Google Safe Browsing (GSB) does not currently list the domain, suggesting either recent takedown or evasion of detection at the time of analysis. As of the latest assessment, promwex.com has been taken offline, likely due to enforcement actions by hosting providers or security entities. However, the residual risk remains elevated for users who may have interacted with the domain prior to its deactivation. Historical DNS records and cached content may still pose a threat if accessed through archival services or malicious redirects. Users are advised to verify the legitimacy of any crypto gambling platform by cross-referencing official branding, SSL certificates, and domain registration details. Organizations should monitor for residual traffic to this domain and implement blocklist updates to prevent future exposure to similar impersonation campaigns.