gazacoin[.]top

The domain gazacoin.top is a confirmed phishing site engaged in brand impersonation targeting users of the cryptocurrency platform CoinGecko. It presents itself as a legitimate cryptocurrency project under the name 'Gaza Coin' but operates as a scam designed to deceive victims into disclosing sensitive information or transferring funds. No drainer kit was identified, and the site is currently taken offline, though prior activity remains a risk to those who interacted with it.

Technical analysis reveals gazacoin.top was flagged by 2 of 95 security vendors on VirusTotal, including Gridinsoft and Seclookup, with a Gridinsoft trust score of 0/100. The domain appears on 4 security blocklists: PhishDestroy, Polkadot, Enkrypt, and Codeesura. It was registered on February 21, 2026, and resolved to the IP address 188.114.96.3, hosted by Cloudflare in the US (AS13335). The SSL certificate was issued by WE1, and the observed page title was 'Gaza Coin'. Google Safe Browsing did not flag the domain at the time of assessment.

Individuals who visited gazacoin.top should immediately change any passwords or credentials entered on the site, enable two-factor authentication on all accounts, and monitor for unauthorized transactions or fraudulent activity. Cryptocurrency users are advised to revoke any token approvals granted to unknown contracts and consider transferring funds to a new wallet if exposure is suspected. Report the domain to relevant platforms, including CoinGecko’s official abuse channels, and submit the URL to threat-sharing communities such as PhishTank or URLVoid to aid in broader mitigation efforts.