dragowex[.]com

This domain, dragowex.com, is actively engaged in brand impersonation targeting users of cryptocurrency-based gambling platforms. The site presents itself as an official crypto casino endorsed by high-profile figures, specifically claiming affiliation with Elon Musk under the title 'Dragowex: Elon Musk’s Official Crypto Casino Powered by Blockchain.' Such impersonation tactics are designed to exploit trust in well-known personalities and emerging blockchain technologies to lure victims into depositing cryptocurrency, which is then systematically drained from their wallets through malicious smart contracts or fraudulent withdrawal schemes. The inclusion of blockchain terminology and celebrity endorsements serves to legitimize the scam and increase conversion rates among targeted users. Analysis of the domain’s infrastructure reveals multiple indicators of malicious intent. The domain was registered on April 28, 2026, through Fewmoretaps OU, operating under the registrar Trustname.com. It resolves to the IP address 172.67.199.152 and utilizes a Let’s Encrypt SSL certificate, which, while providing encryption, does not validate the legitimacy of the site. Detection metrics further corroborate the threat: the domain is flagged by 13 out of 95 security vendors on VirusTotal and appears on one security blocklist. Additionally, it is referenced in a single threat intelligence pulse on AlienVault OTX, indicating its recognition within the cybersecurity community as a confirmed malicious entity. The Gridinsoft trust score of 0/100 underscores the domain’s complete lack of credibility. Users who have visited dragowex.com or interacted with its content are advised to take immediate remedial action. Any cryptocurrency wallets that were connected to the site should be considered compromised; users should cease all transactions, revoke any active smart contract approvals, and transfer remaining funds to a new, secure wallet. It is also recommended to monitor accounts for unauthorized transactions and report the incident to relevant blockchain analytics platforms or cybersecurity authorities. Browser data, including cookies and cached content, should be cleared to eliminate residual tracking mechanisms. Given the domain’s active status and elevated risk level, continued vigilance is necessary to prevent further financial loss.