gatexx[.]club

PhishDestroy has identified gatexx.club as a brand impersonation threat specifically targeting Ethereum users. This domain, now taken offline, was designed to deceive visitors by mimicking a legitimate cryptocurrency exchange platform. The page title copied from Gate.com, reading "Buy/Sell Bitcoin, Ethereum and 4,400+ Altcoins | Cryptocurrency Exchange | Gate," was a clear attempt to harvest credentials and drain crypto wallets. The domain was registered through Amazon Registrar, Inc. on February 21, 2026, and resolved to IP 35.72.74.133, which is hosted on Amazon Web Services. Security scanning on VirusTotal revealed that 9 out of 95 vendors flagged this domain as malicious, and it appears on one security blocklist. The SSL certificate was issued by Amazon RSA 2048 M02, lending a false sense of legitimacy. The elevated risk level is justified by the combination of brand impersonation, active hosting, and the specific targeting of Ethereum users. Given that the domain is now offline, users who may have interacted with it should immediately change passwords, enable two-factor authentication, and monitor their Ethereum wallets for unauthorized transactions. PhishDestroy recommends always verifying the URL of any cryptocurrency exchange against official sources and avoiding clicking links from unsolicited messages. For real-time safety checks, users can search any domain on PhishDestroy to see if it has been flagged for phishing or other threats.