gurnax[.]com

Analysis of gurnax.com, observed as an alleged crypto casino front, indicates a high‑risk brand‑impersonation operation targeting the x.com brand. The domain was registered on October 09, 2025 through NiceNIC International Group Co., Limited and is currently hosted behind Cloudflare (AS13335) with the IP address 172.67.155.233 located in the United States. No TLS certificate is presented, meaning the site served only HTTP, which further reduces trust. The page title returned from the live endpoint reads "Gurnax: Most Popular Online Crypto Casino Based on Blockchain," aligning with the classified scam type of a crypto scam. Infrastructure data shows the domain uses Cloudflare name servers annalise.ns.cloudflare.com and donovan.ns.cloudflare.com, a common pattern for fast‑flux or proxy‑based phishing sites.

Security telemetry reinforces the malicious assessment. PhishDestroy has already blocked the domain, and it appears on a single security blocklist. Gridinsoft assigns a trust score of 1 out of 100, reflecting extreme suspicion. VirusTotal reports that 10 of 95 scanning engines flag the domain, providing independent confirmation of malicious intent. The underlying phishing kit is identified as a "Gambler Scam," which typically harvests credentials or funds via deceptive casino‑style offers.

Defenders should treat gurnax.com as hostile infrastructure. Network defenses ought to block traffic to 172.67.155.233 and to the domain itself, while endpoint security solutions should incorporate the observed VirusTotal detections. Because the site is currently offline, continuous monitoring is advised to detect any re‑activation or migration to new hosting. Organizations should also update brand‑protection feeds for x.com to include this impersonation attempt. The lack of an SSL certificate, low trust score, and multiple independent detections collectively indicate that gurnax.com is a fraudulent endpoint designed to lure victims into a crypto‑themed scam.