truwex[.]bet

This domain, truwex.bet, is identified as a cryptocurrency phishing platform designed to harvest wallet credentials and manipulate transaction approvals. Analysis indicates no direct association with known legitimate brands, though the infrastructure mimics decentralized finance (DeFi) interfaces to deceive users into authorizing malicious smart contract interactions. No specific drainer kit has been conclusively linked to this domain, but behavioral patterns align with wallet-draining phishing campaigns observed in recent threat intelligence reports. Infrastructure analysis reveals the following technical indicators: the domain was registered on May 25, 2026, through Global Domain Group LLC, a registrar frequently utilized by threat actors for bulk domain acquisitions. VirusTotal detections stand at 16/95 security vendors, with the domain appearing on two independent security blocklists. The SSL certificate is issued by Let's Encrypt, a common choice for phishing sites due to its low-cost and automated issuance process. As of the latest scan, Google Safe Browsing (GSB) has not yet listed the domain, though this may reflect a lag in propagation rather than benign status. The IP address resolves to a hosting provider known for anonymized services, further complicating attribution. Current status remains active, with the domain continuing to resolve and serve content. Response actions by security vendors include blocking by PhishDestroy and OISD, though these measures are not universally applied across all security stacks. The elevated risk level is justified by the domain's recent creation, low detection prevalence, and targeted nature of the phishing scheme. Users are advised to treat any interaction with truwex.bet as malicious, particularly in contexts involving cryptocurrency transactions or wallet connections. Organizations should update blocklists to include this domain and monitor for related infrastructure, such as subdomains or newly registered lookalike domains. Given the domain's age and detection metrics, continued monitoring is recommended to assess shifts in vendor coverage or hosting changes.