wcasx[.]com

This domain, wcasx.com, poses a high-risk brand impersonation threat by mimicking X.com, a widely recognized social media platform. The site presents itself as a blockchain-based crypto casino, a common tactic to lure users into disclosing credentials or financial information under false pretenses. Analysis indicates this is not an official X.com property but a fraudulent imitation designed to exploit the brand's reputation for malicious gain. Infrastructure analysis reveals multiple red flags confirming its malicious nature. The domain was registered on October 13, 2025, through Dominet (HK) Limited, a registrar frequently associated with suspicious activity. It resolves to the IP address 172.67.187.137, hosted on Cloudflare's network (AS13335), which is often leveraged to obscure the true origin of phishing infrastructure. Detection metrics further validate the threat: 9 out of 95 security vendors on VirusTotal flag the domain as malicious, and it appears on one security blocklist. The absence of an SSL certificate adds to its suspicious profile, as legitimate sites typically enforce encrypted connections. Users who have visited wcasx.com should take immediate corrective action. If credentials were entered, reset passwords for X.com and any other accounts where the same credentials may have been reused. Monitor financial statements for unauthorized transactions, particularly if cryptocurrency or payment details were submitted. Report the domain to relevant security teams or abuse contacts, such as the registrar or hosting provider, to aid in takedown efforts. Exercise caution with unsolicited links, especially those promoting financial or gambling services, and verify domain authenticity through official channels before interacting with unfamiliar sites.