beowux[.]com

This domain, beowux.com, is actively engaged in credential theft targeting users of cryptocurrency-based gambling platforms. Analysis of the page title, 'Beowux: Most Popular Online Crypto Casino Based on Blockchain,' indicates an attempt to impersonate legitimate blockchain gambling services to harvest login credentials, wallet addresses, or other sensitive user data. No direct evidence of a crypto drainer kit was observed, but the domain’s structure and thematic focus align with credential harvesting tactics commonly used in phishing campaigns against crypto casino users. Infrastructure analysis reveals the following technical indicators: the domain resolves to IP address 172.67.141.215, hosted on AS13335 (Cloudflare, Inc.), and was registered on May 25, 2026, through Fewmoretaps OU d/b/a Trustname.com. VirusTotal detection shows 1/95 security vendors flagging the domain as malicious. The domain appears on three security blocklists, including entries from PhishDestroy, MetaMask, and SEAL. The SSL certificate is issued by Let’s Encrypt (serial number E8), which, while not inherently malicious, is frequently leveraged by threat actors due to its accessibility and short-lived validity periods. As of the latest assessment, beowux.com remains active, with no evidence of takedown or mitigation efforts. Users are advised to block the domain at the network level and monitor for unauthorized access attempts linked to credentials entered on this site. Organizations should update endpoint protection rules to include this domain and its associated IP address in denylists. Given the high-risk classification and ongoing activity, continuous monitoring of related infrastructure is recommended to identify potential pivot domains or secondary attack vectors.