wotedex[.]com

This domain is flagged as an elevated-risk brand impersonation threat designed to deceive users of the SEI blockchain ecosystem. Analysis indicates the infrastructure is specifically crafted to mimic legitimate crypto platforms, leveraging social engineering tactics such as falsely associating itself with high-profile figures (e.g., Elon Musk) and blockchain technology to lure victims into engaging with fraudulent services. The threat type aligns with crypto-related scams, including potential crypto drainers or fake investment schemes, which aim to extract sensitive credentials or digital assets from unsuspecting users.

Infrastructure analysis reveals multiple technical indicators corroborating malicious intent. The domain wotedex.com is detected by 17 out of 95 security vendors on VirusTotal, a notable discrepancy suggesting suspicious activity. It resolves to the IP address 172.67.167.86, hosted on Cloudflare’s network (AS13335), a common obfuscation tactic to mask true origin. The SSL certificate, issued by Google Trust Services (WE1), provides a veneer of legitimacy but does not mitigate the underlying risk. Registered through Global Domain Group LLC on February 21, 2024, the domain appears on at least one security blocklist, further validating its malicious classification. The page title, "Wotedex: Elon Musk’s Official Crypto Casino Powered by Blockchain," explicitly impersonates the SEI brand while falsely leveraging the reputation of public figures to enhance credibility.

Mitigation steps for users and organizations include immediate blocking of the domain and associated IP address (172.67.167.86) at the network level. Users should be educated to recognize brand impersonation tactics, particularly those exploiting crypto trends or celebrity endorsements. Verification of domain registration details via WHOIS and cross-referencing with official brand communications can help identify fraudulent sites. For crypto-related interactions, users should exclusively engage with platforms verified through official channels or blockchain explorers. Organizations should monitor for similar domains registered under the same registrar (Global Domain Group LLC) or resolving to the same IP range, as these may indicate broader campaign infrastructure.