wxbet[.]pro

The domain wxbet.pro is a phishing site engaged in brand impersonation targeting Ethereum users. It presents itself as a legitimate cryptocurrency platform but is designed to deceive victims into disclosing sensitive information or transferring funds under false pretenses. No cryptocurrency drainer kit was identified in this case. The site is currently taken offline, reducing immediate risk, though prior visitors may remain vulnerable to follow-up attacks.

Technical analysis shows wxbet.pro was flagged by 1 of 95 VirusTotal security vendors, including SOCRadar. Google Safe Browsing did not flag the domain, but it appears on 1 security blocklist (PhishDestroy). The domain is registered through Cloudflare, Inc., with nameservers carla.ns.cloudflare.com and martin.ns.cloudflare.com. It resolves to IP address 57.129.97.29, hosted on AS16276 (OVH SAS) in Germany. The SSL certificate is issued by XUI.one, and the observed page title was 'WXBET | Enter the world of sport and stakes!'. Gridinsoft assigned a trust score of 0/100, reinforcing its malicious classification.

Users who interacted with wxbet.pro should immediately change any credentials entered on the site and enable two-factor authentication on all cryptocurrency and financial accounts. Monitor accounts for unauthorized transactions and report any suspicious activity to the impersonated brand (Ethereum) and relevant authorities. Victims may also submit the domain to anti-phishing platforms such as PhishTank or Google Safe Browsing to aid in broader threat mitigation.