vaiwax[.]com

On 23 July 2026 investigators observed that the domain vaiwax.com was registered on 21 February 2026 through NiceNIC International Group Co., Limited. The site resolves to IP address 104.21.71.232, which belongs to Cloudflare, Inc. (AS13335) and is geolocated in the United States. The domain is served without an SSL certificate and uses the Cloudflare nameservers ace.ns.cloudflare.com and gigi.ns.cloudflare.com. The page title returned from the site, “Vaiwax: Most Popular Online Crypto Casino Based on Blockchain,” combined with the classification of a “Crypto Scam” and the identification of a Gambler Scam phishing kit, indicates that the infrastructure was intended to lure victims into a fraudulent cryptocurrency gambling platform. Threat‑intelligence feeds have flagged vaiwax.com on a single security blocklist and it has been actively blocked by PhishDestroy.

VirusTotal analysis shows that 16 of 93 scanning engines reported the domain as malicious, reinforcing the suspicion of malicious intent. The Gridinsoft trust score of 1 / 100 further underscores the poor reputation of the host. The domain’s current HTTP status is offline, suggesting that the operators have taken the site down, either voluntarily or in response to takedown actions. No HTTPS certificate was observed, which limits the ability of browsers to signal a secure connection to end users, but also removes a layer of transport‑level authentication.

Uncertainty remains around the exact victim outreach methods, the monetary value of any stolen funds, and whether additional infrastructure (e.g., command‑and‑control servers) is associated with the same IP range. Defenders should continue to monitor the IP 104.21.71.232 for any re‑use, enforce outbound traffic filtering to block connections to this address, and add vaiwax.com to internal blocklists on both DNS and web proxy layers.