wizwex[.]com

On 24 July 2026, wizwex.com was observed as an offline domain that had been used for a brand‑impersonation campaign targeting the foundation brand. The site was registered on 5 August 2025 through Key‑Systems GmbH and is hosted on Cloudflare infrastructure (AS13335) with the IP address 172.67.142.32 located in the United States. DNS resolution points to the Cloudflare nameservers luciane.ns.cloudflare.com and zahir.ns.cloudflare.com. No TLS certificate was presented, indicating the site operated over plain HTTP.

The page title returned by the server reads “WIZWEX | Play at the best online casino based on Blockchain”, which aligns with the “Crypto Scam” classification and the Gambler Scam phishing kit identified in the analysis. VirusTotal scans show that five of ninety‑five antivirus engines flagged the domain, and the domain appears on a single security blocklist. PhishDestroy has taken the domain offline, and Gridinsoft assigns a trust score of zero out of one hundred. The elevated risk rating reflects the combination of brand impersonation, cryptocurrency‑related lure, and low trust metrics.

Defenders should ensure that the IP address 172.67.142.32 is blocked at network perimeter, add wizwex.com to URL filtering and phishing protection lists, and monitor for any re‑registration or reuse of the same infrastructure. Continuous monitoring of Cloudflare‑hosted assets associated with the identified nameservers is recommended, as adversaries frequently rotate domains while retaining the same hosting provider. Because the site is currently offline, immediate incident response actions are limited to containment; however, organizations should review any recent outbound connections to the domain or its IP to detect possible credential harvesting attempts.