foterex[.]com

Analysis of foterex.com indicates a confirmed crypto scam domain impersonating an Elon Musk-affiliated blockchain casino. The domain was registered on February 21, 2026, and is currently offline, blocked by PhishDestroy. Infrastructure analysis reveals it resolved to a Cloudflare IP (2a06:98c1:3120::3, AS13335) located in the US, a common hosting choice for phishing campaigns due to its CDN and proxy services. The SSL certificate (WE1) is a low-assurance Domain Validation type, offering minimal identity verification.

The page title, 'Foterex: Elon Musk’s Official Crypto Casino Powered by Blockchain,' explicitly targets victims with a high-profile brand impersonation, aligning with the 'Gambler Scam' phishing kit classification. Security vendor detections on VirusTotal show 14 of 93 engines flagging the domain, a moderate but notable signal given the domain's recent takedown status. It appears on one security blocklist, suggesting limited but active threat intelligence coverage. Defenders should treat this domain as a confirmed malicious asset, particularly for crypto-related fraud.

While the domain is offline, historical DNS and WHOIS records should be preserved for forensic analysis. Monitoring for re-registration or related domains (e.g., typosquatting variants) is recommended, as scam operators frequently reuse infrastructure. No additional page content or behavioral indicators are available for deeper analysis, but the combination of brand impersonation, scam kit classification, and vendor detections provides sufficient evidence for blocking and alerting users.