sonarwex[.]com

Analysis of sonarwex.com indicates a phishing domain associated with a crypto-based gambling scam, classified under the Gambler Scam phishing kit. The domain was registered on August 28, 2025, through Web Commerce Communications Limited and currently resolves to IP 172.67.159.38, hosted on Cloudflare's infrastructure (AS13335) in the US. As of July 23, 2026, the domain is offline, though it was previously flagged by 12 of 95 security vendors on VirusTotal and appears on one security blocklist, specifically PhishDestroy. The page title, 'Sonarwex: Most Popular Online Crypto Casino Based on Blockchain,' suggests the domain was designed to impersonate a cryptocurrency gambling platform, though no SSL certificate was present, and the exact content or functionality of the site remains unconfirmed due to its offline status.

Infrastructure analysis reveals the domain uses Cloudflare nameservers (samara.ns.cloudflare.com and todd.ns.cloudflare.com), a common tactic to obscure hosting details and evade takedowns. The Gridinsoft trust score of 1/100 further supports its malicious classification. Defenders should treat this domain as a confirmed phishing threat, particularly for crypto-related fraud.

While the domain is currently inactive, historical DNS records and associated IP should be monitored for reactivation or migration to new infrastructure. Blocking the domain and its resolved IP at the perimeter is recommended, along with alerting users who may have interacted with it prior to takedown. No additional brand impersonation or scam subtype beyond the crypto casino classification is confirmed in the available data.