zexonas[.]com

The domain zexonas.com is identified as a brand impersonation threat targeting users of crypto-based gambling platforms. Analysis confirms this domain impersonates a legitimate crypto casino, likely to deceive users into engaging with fraudulent services. The domain is currently offline, but prior activity indicates malicious intent under the guise of a blockchain-based gambling site. Infrastructure analysis reveals the domain was registered on April 09, 2026, through Name SRS AB, a registrar historically associated with high-risk domains. It resolves to the IP address 188.114.97.3 and appears on one security blocklist. Detection metrics include a Scamadviser trust score of 1/100 and a Gridinsoft trust score of 1/100, both indicating extreme risk. VirusTotal reports 16 of 95 security vendors flagging the domain as malicious. Technological indicators include the use of tracking tools such as Twitter Ads, Facebook Pixel, and Cloudflare Browser Insights, which are often leveraged to monitor user interactions and optimize fraudulent campaigns. Current status confirms the domain has been taken offline, though residual risk remains for users who may have interacted with it prior to deactivation. Organizations and individuals are advised to block the domain and its associated IP address at the network level. Users who accessed the site should monitor financial transactions for unauthorized activity, particularly those involving cryptocurrency. Security teams should update detection rules to include the domain, IP, and related indicators of compromise (IoCs) to prevent future exposure. Given the elevated risk level, proactive monitoring of similar impersonation domains targeting crypto gambling platforms is recommended.