go[.]zaewex[.]com

The domain go.zaewex.com has been identified as an active phishing site impersonating the brand Base. The page title discovered on this domain is 'Zaewex: Most Popular Online Crypto Casino Based on Blockchain', which indicates an attempt to mislead users into believing they are visiting a legitimate online gambling platform. The domain was created on May 25, 2026, and is currently active. It has been flagged by 15 out of 95 security vendors on VirusTotal, indicating a significant level of concern among security professionals regarding its legitimacy.

This domain is registered through Fewmoretaps OU, operating under the name Trustname.com, and utilizes Cloudflare services alongside HTTP/3, suggesting efforts to obscure its true nature and enhance its performance. Furthermore, it resolves to the IP address 172.67.214.125 and has a trust score of 0/100 according to Gridinsoft, reinforcing its categorization as a high-risk entity. It is also blocked by PhishDestroy and appears on one known security blocklist, indicating that it has been recognized as a threat by the cybersecurity community.

The phishing kit employed with this domain has been identified as Gambler Scam, which aligns with its focus on creating a fraudulent online casino experience. The SSL certificate is issued by Let's Encrypt, commonly used for securing websites, which may lend a false sense of security to unsuspecting users. As the domain continues to operate, defenders should monitor related infrastructure and educate potential targets about the dangers of such impersonation campaigns.

In conclusion, the active status and the various indicators of malicious intent associated with go.zaewex.com necessitate immediate attention from cybersecurity professionals. Organizations, especially those affiliated with the brand Base, are urged to implement proactive measures, including user awareness training and technical controls to mitigate the risks posed by this threat.