gazwex[.]com

Analysis conducted on July 24, 2026 identifies gazwex.com as a confirmed crypto‑phishing site. The domain was registered on February 21, 2026 through MAT BAO CORPORATION and resolves to the IPv6 address 2606:4700:3037::ac43:ccbf, which belongs to AS13335 Cloudflare, Inc. in the United States. The site is protected by Cloudflare but lacks an SSL certificate, indicating that HTTPS negotiation is not established. The page title returned by the server is “Gazwex: Elon Musk’s Official Crypto Casino Powered by Blockchain”, matching the declared scam type of a crypto scam and the Gambler Scam phishing kit.

Gridinsoft assigns a trust score of 1 out of 100, reflecting extreme maliciousness. The domain appears on a single security blocklist and is actively blocked by PhishDestroy. VirusTotal analysis shows that 16 of 93 scanning engines flag the domain as malicious, providing additional corroboration. The site’s current status is offline, limiting immediate access but preserving evidence of the infrastructure.

Defenders should add gazwex.com and its associated IPv6 address to blocklists, monitor any future DNS resolution changes, and consider tightening controls on registrations from MAT BAO CORPORATION. Continuous observation of Cloudflare‑hosted IP ranges for similar patterns is recommended, as the attacker leveraged the provider’s anonymity to mask the origin. The combination of a low trust score, multiple vendor detections, and explicit branding of a high‑profile individual underscores the elevated risk associated with this infrastructure.