boomrax[.]com

This domain, boomrax.com, is confirmed as an active phishing site specializing in brand impersonation of crypto casino and blockchain-based gambling platforms. Analysis indicates the site is designed to deceive users by mimicking legitimate online gambling services, specifically targeting individuals seeking blockchain-integrated casino experiences. The domain remains operational as of the latest verification, posing a high risk to potential victims through fraudulent financial transactions and credential harvesting. Infrastructure analysis reveals boomrax.com was registered on March 27, 2025, through MAT BAO CORPORATION, a registrar frequently associated with suspicious domains. The domain resolves to the IP address 69.5.189.55, hosted under AS42624 (Global-Data System IT Corporation) in Switzerland. Security vendor detections are minimal but notable, with 1 of 95 VirusTotal engines flagging the domain as malicious. The site appears on one security blocklist, and no SSL certificate is present, increasing the risk of unencrypted data interception. The page title, 'BOOMRAX | Play at the best online casino based on Blockchain,' explicitly aligns with the impersonation of crypto gambling brands, a tactic commonly used to exploit the trust of users in decentralized financial platforms. Current status confirms boomrax.com remains active, with no takedown or mitigation efforts observed. Organizations and users are advised to implement immediate countermeasures, including blocking the domain and IP at the network level, deploying endpoint protection rules to prevent access, and alerting employees or customers about the threat. Financial institutions and crypto wallet providers should monitor for transactions linked to this domain and flag them for potential fraud. Given the high-risk nature of this infrastructure, proactive threat hunting for related indicators—such as the registrar, hosting provider, or IP range—is recommended to identify additional malicious assets. Users encountering this domain should avoid interaction, report it to relevant security teams, and verify the legitimacy of any gambling or crypto service through official channels before engaging.