negowex[.]com

The domain negowex.com has been identified as a brand impersonation threat specifically targeting users of cryptocurrency-based gambling platforms. Analysis confirms this domain mimics legitimate crypto casino services, presenting itself as a blockchain-based online casino. As of the latest assessment, the domain has been taken offline, though prior activity remains a concern for historical exposure. Infrastructure analysis reveals that negowex.com was registered on December 07, 2025, through MAT BAO CORPORATION and resolved to the IP address 188.114.96.3. The domain is flagged by 14 of 95 security vendors on VirusTotal, indicating a high likelihood of malicious intent. Additional technical indicators include a Gridinsoft trust score of 1/100 and a Scamadviser trust score of 1/100, both reflecting extreme risk. The domain appears on one security blocklist and was previously blocked by PhishDestroy. Detected technologies include Twitter Ads, Facebook Pixel, and Cloudflare, suggesting an attempt to amplify reach through social media and evade detection via proxy services. Current status confirms the domain is offline, reducing immediate risk of active exploitation. However, historical data and residual threats remain. Organizations and individuals are advised to block the domain and associated IP address (188.114.96.3) at the network level. Users who may have interacted with negowex.com should monitor cryptocurrency wallets for unauthorized transactions and revoke any connected smart contract approvals. Security teams should update detection rules to include this domain and its indicators of compromise (IOCs) in threat intelligence feeds. Vigilance is recommended for similar domains registered through the same registrar or resolving to the same IP range.