reomaxx[.]com
“Reomaxx: Most Popular Online Crypto Casino Based on Blockchain”
Resumen de las pruebas
On July 25, 2026, the domain reomaxx.com was identified as an inactive crypto‑scam infrastructure that impersonates the legitimate brand x.com. The domain was registered on August 28, 2025 through NiceNIC International Group Co., Limited and has never presented a valid TLS certificate, indicating that any traffic would have been delivered over plain HTTP. DNS resolution points to the IP address 188.114.97.3, which belongs to AS13335 Cloudflare, Inc. and is geolocated to the United States. The authoritative nameservers are autumn.ns.cloudflare.com and sri.ns.cloudflare.com, both owned by Cloudflare, suggesting the operator leveraged Cloudflare’s CDN and DNS services to obscure the true hosting environment.
The site’s only observed content is the page title “Reomaxx: Most Popular Online Crypto Casino Based on Blockchain”, which aligns with the recorded scam type of a crypto scam and the use of a “Gambler Scam” phishing kit. The low Gridinsoft trust score of 1 out of 100 reinforces the malicious intent. The domain appears on a single security blocklist and was actively blocked by the PhishDestroy service. VirusTotal analysis returned detections from two of ninety‑five scanning engines, confirming that at least a subset of security products recognize the domain as malicious.
Because the site is currently taken offline, direct observation of the payload is not possible, leaving the exact phishing landing page and any credential‑harvesting mechanisms unverified. Nonetheless, the combination of a brand‑impersonation claim, the crypto‑casino narrative, and the use of a known gambling‑related phishing kit provides a clear indication of the intended fraud vector. Defenders should add reomaxx.com to URL filtering and DNS blocklists, monitor traffic to the associated Cloudflare IP address for any future re‑use, and consider extending blocklist coverage to the observed nameservers.
Data Coverage
Señales de seguridad
Inteligencia de seguridad de red
Proceso de respuesta ante amenazas Pipeline
Cobertura de listas de bloqueo
10 fuentes externas supervisadas · instantánea del 12/08/2026
10 fuentes externas supervisadas Sin coincidencias
Cronología de detección
-
Cloudflare Radar
Análisis de Cloudflare Radar almacenado · Abrir análisis
Captura guardada
Inteligencia de dominios
Detalles técnicosDNS, nombres TLS y marcas de tiempo
ICANN OVERSIGHT
Acreditación y contexto RAA
Acreditación y contexto RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Análisis de VirusTotal
¿Te ha afectado esta página web?
Si ingresó credenciales de cuenta, información personal o de pago, o descargó un archivo de este dominio, tome medidas inmediatas. A continuación encontrará recursos que le ayudarán a informar el incidente y protegerse.
Informa a las autoridades locales
Seleccione su país para obtener contactos oficiales de cibercrimen o crear un borrador de queja →.
Comprobar cualquier dominio
Análisis de amenazas utilizando listas de bloqueo almacenadas, WHOIS, DNS y evidencia de escaneo público
Escanear ahoraDenunciar un intento de phishing
Envía los dominios sospechosos a nuestra base de datos de amenazas: protege a la comunidad
DenunciarFlujo de amenazas en tiempo real
Informes de phishing recientes y cambios de disponibilidad observados
MonitorizarMantente informado, mantente a salvo
Supervisa las amenazas en tiempo real o impugna esta entrada si crees que se trata de un falso positivo.