prozwex[.]com

Analysis of prozwex.com shows a high‑confidence brand‑impersonation campaign targeting the foundation brand. The domain was registered on August 10, 2025 through Key-Systems GmbH and currently resolves to the Cloudflare address 172.67.214.165, an ASN (AS13335) located in the United States. No TLS certificate is presented, indicating that the site is served over plain HTTP, which reduces the credibility of any purported secure service. The page title retrieved from the live host reads "PROZWEX | Play at the best online casino based on Blockchain," aligning with the declared scam type of a crypto‑related gambling scheme. Vendor intelligence reports a Gridinsoft trust score of 8 out of 100, reflecting a very low reputation.

VirusTotal scans flag the domain on 12 of 95 security engines, providing further malicious indication. The site is associated with the known "Gambler Scam" phishing kit, and it has been actively blocked by the PhishDestroy blocklist. It also appears on one additional security blocklist, reinforcing the notion that it is recognized as malicious by the community. The domain’s nameservers are kayleigh.ns.cloudflare.com and lex.ns.cloudflare.com, both operated by Cloudflare, a common choice for fast‑changing malicious infrastructure.

Current operational status is listed as offline, which may be temporary or part of takedown efforts. Defenders should add prozwex.com to domain‑based blocklists, monitor DNS queries for the associated Cloudflare IP range, and enforce strict outbound filtering for connections to this address. Email gateways should flag any messages referencing the foundation brand that contain links to this domain, and incident response teams should investigate any credential or payment data that may have been submitted before the site was taken offline. Continuous threat‑intel feeds should be consulted for updates, as the underlying infrastructure (Cloudflare) can be repointed to new malicious sites with minimal notice.