kuzwex[.]com

Analysis of kuzwex.com reveals a newly observed crypto‑focused phishing infrastructure. The domain was registered on 12 December 2025 through MAT BAO CORPORATION and resolves to the Cloudflare address 104.21.87.119, ASN 13335, geolocated in the United States. An SSL certificate labeled WE1 is present, indicating that transport encryption is employed, but the certificate alone does not mitigate the malicious intent. The page title returned by the server, "Kuzwex: Elon Musk’s Official Crypto Casino Powered by Blockchain," aligns with the reported scam type of a crypto scam and matches the Gambler Scam phishing kit associated with the site.

Gridinsoft assigns a trust score of 1 out of 100, reflecting a near‑zero reputation. VirusTotal analysis shows that three of ninety‑three scanned vendors flagged the domain, corroborating its malicious classification. The domain appears on a single security blocklist and has been actively blocked by the PhishDestroy service, further confirming its status as a threat vector.

Current monitoring indicates the site has been taken offline, but the underlying infrastructure—Cloudflare edge nodes and the registrar details—remains reusable for future campaigns. Defenders should continue to block the IP 104.21.87.119 at network perimeter devices, enforce DNS filtering for kuzwex.com, and monitor for any re‑registration attempts by the same registrar. Because the domain’s content has not been publicly archived, analysts should treat any future resolution to the same IP as potentially re‑hosted phishing content and apply the same containment measures.