gizabtc[.]com

Analysis indicates that gizabtc.com was registered on 21 February 2026 through Web Commerce Communications Limited operating as WebNic.cc. The domain resolves to 104.21.76.190, an address owned by Cloudflare, Inc. (AS13335) and located in the United States. DNS resolution is served by ns100.webnic.cc and ns101.webnic.cc. The site presents the page title “Buy & Sell Bitcoin, Ethereum | Cryptocurrency Exchange | Exchange,” suggesting a cryptocurrency exchange façade. The domain is classified as a crypto scam that impersonates the Ethereum brand.

It appears on a single security blocklist and has been blocked by PhishDestroy. VirusTotal analysis shows that four of ninety‑three scanning engines flagged the domain, indicating malicious activity. The Gridinsoft trust score is 0 out of 100, reinforcing the low confidence in the host’s legitimacy. The SSL certificate identifier is WE1, but no further validation details are provided. The domain’s current operational status is offline, limiting immediate interaction but preserving its infrastructure for potential reuse.

Uncertainties remain regarding the specific phishing kit or payload delivered, as no page content beyond the title has been examined. The low detection count suggests that many scanners have not yet identified malicious behavior, which may reflect limited exposure or evasion techniques. Defenders should add gizabtc.com to internal blocklists, monitor DNS queries for the associated IP and nameservers, and watch for any re‑registration attempts. Continuous re‑scanning of the domain, especially if it becomes active again, is recommended to capture evolving indicators. Organizations handling Ethereum‑related assets should be alerted to the impersonation attempt and instructed to verify URLs against official sources before any transaction.