app[.]zaewex[.]com

The domain app.zaewex.com has been identified as a brand impersonation threat targeting online crypto casino and gambling platforms. Analysis confirms the domain is designed to mimic legitimate gambling services, specifically impersonating the Zaewex brand, as evidenced by the page title 'Zaewex: Most Popular Online Crypto Casino Based on Blockchain.' The domain is currently offline, but prior activity indicates a deliberate attempt to deceive users into engaging with fraudulent gambling services. Infrastructure analysis reveals the domain was registered through Fewmoretaps OU d/b/a Trustname.com and resolves to the IP address 104.21.86.38. Security vendor assessments show 16 of 95 VirusTotal engines flagged the domain as malicious, while Gridinsoft assigned a trust score of 1 out of 100. The domain appears on one security blocklist and was actively blocked by PhishDestroy. Additional technical indicators include the use of a Let's Encrypt SSL certificate, Cloudflare hosting, and HTTP/3 protocol support, which are commonly leveraged to obfuscate malicious infrastructure. Current status indicates the domain has been taken offline, though the underlying infrastructure may remain dormant or repurposed. Organizations and users are advised to block the domain and associated IP address (104.21.86.38) at the network level. Security teams should monitor for similar impersonation attempts targeting crypto gambling platforms, particularly those using Cloudflare or Let's Encrypt certificates. If the domain reappears, immediate reporting to relevant security blocklists and hosting providers is recommended to mitigate further risk.