peozax[.]com

The domain peozax.com was registered on 29 September 2025 through NiceNIC International Group Co., Limited and is hosted on Cloudflare infrastructure (AS13335, United States). DNS resolution points to 172.67.170.49 and the authoritative nameservers are sevki.ns.cloudflare.com and treasure.ns.cloudflare.com. No TLS certificate is presented, indicating the site was served over plain HTTP or that HTTPS was not configured before it was taken offline. The page title returned during the brief live window reads "Peozax: Most Popular Online Crypto Casino Based on Blockchain," suggesting a cryptocurrency‑focused gambling front‑end. The site explicitly impersonates the brand x.com, and the associated scam type is listed as a crypto scam employing the "Gambler Scam" phishing kit.

VirusTotal records show that 12 of 95 scanning engines flagged the domain, reinforcing the malicious classification. The domain appears on a single external blocklist and has been added to the PhishDestroy blocklist. Independent trust scoring from Gridinsoft assigns a score of 1 out of 100, reflecting an extremely low reputation. Current status is offline, so active probing is not possible, but the infrastructure artefacts remain observable.

The available evidence confirms that peozax.com was used to lure victims under the guise of a blockchain casino and to exploit the reputation of x.com for brand impersonation. Uncertainty remains regarding the exact content delivered to users, the extent of data or funds exfiltrated, and whether additional payloads were hosted on the same IP address. Defenders should continue to block the domain and its associated IP address at network perimeter controls, add the nameservers to watch lists for future domains that may reuse the same Cloudflare configuration, and monitor for any re‑registration attempts.