wixboom[.]com

Analysis of wixboom.com indicates this domain was actively flagged as a crypto-related gambling scam targeting users with promises of blockchain-based online casino services. The domain, created on February 15, 2025, and registered through NameSilo, LLC, resolved to the IP address 69.5.189.57, hosted under AS42624 (Global-Data System IT Corporation) in Switzerland. No SSL certificate was present, increasing the risk of unencrypted data transmission. The page title, 'WIXBOOM | Play at the best online casino based on Blockchain,' explicitly aligns with the identified scam type labeled as a 'Crypto Scam' and the 'Gambler Scam' phishing kit, suggesting the site was designed to deceive users into depositing cryptocurrency under false pretenses. Infrastructure analysis reveals the domain used nameservers ns1.nameserverhub.com through ns4.nameserverhub.com, a pattern often observed in bulk-registered phishing domains.

As of the report date, the domain is offline, though it remains listed on at least one security blocklist and was blocked by PhishDestroy. Gridinsoft assigned a trust score of 39 out of 100, reflecting elevated risk. While VirusTotal shows only one security vendor flagging the domain, this does not imply safety, as detection coverage can vary, and the domain was not scanned by all vendors. Defenders should treat this domain as confirmed malicious infrastructure. Network-level blocks should be implemented for the resolved IP (69.5.189.57) and associated nameservers.

Organizations using PhishDestroy or similar tools may already have protections in place. Given the domain's offline status, no active threat is present, but historical logs should be reviewed for connections to this IP or domain. If the site reappears under the same or similar infrastructure, it should be reassessed for continued malicious activity. The lack of SSL and the use of a known phishing kit further support the classification of this domain as a high-risk crypto scam.