gepomex[.]com
“Gepomex: Elon Musk’s Official Crypto Casino Powered by Blockchain”
Résumé des preuves
Analysis of gepomex.com, created on February 21, 2026 and currently taken offline, reveals a coordinated brand‑impersonation operation targeting x.com. The site presented the page title "Gepomex: Elon Musk’s Official Crypto Casino Powered by Blockchain," explicitly positioning itself as an official Elon Musk cryptocurrency casino, a clear attempt to leverage high‑profile branding for fraudulent gain. Infrastructure checks show the domain resolves to IP address 172.67.142.32, which belongs to Cloudflare, Inc. (AS13335) and is geolocated in the United States. No SSL certificate was observed, indicating the site was served over plain HTTP, a common trait of fast‑deployed malicious pages.
The domain appears on a single security blocklist and is listed by PhishDestroy as blocked, confirming that defensive feeds have recognized it as malicious. Its Gridinsoft trust score of 1/100 further underscores its low reputation. VirusTotal scans flagged the domain by 14 of 93 security vendors, providing independent corroboration of its malicious nature. The registrar information points to Hello Internet Corp, a registrar often associated with disposable or low‑cost registrations used in abuse campaigns.
Threat intelligence references a Gambler Scam phishing kit, aligning with the casino narrative in the page title, and an AlienVault OTX pulse lists the domain in one threat feed, indicating that at least one open‑source intelligence source has catalogued its activity. The site is categorized as a Crypto Scam, matching the content’s emphasis on blockchain and cryptocurrency. While the domain is offline, defenders should continue to block the associated IP range and monitor for re‑use of the same hosting infrastructure. Additional precaution includes adding gepomex.
Instantané des preuves transmises
- Envoyé
- Entrées du registre
- 2
- ID du dossier
PD-20260201-26C168- Titre de la page capturée
- Gepomex: Elon Musk’s Official Crypto Casino Powered by Blockchain
- Artefact PDF
- Preuve PDF
Fondement juridique
Texte intégral des preuves
Acceptable Use Policy (AUP): The domain gepomex.com is engaged in phishing activities, which constitutes a clear violation of your AUP that prohibits illegal activities, fraud, and deception.
Terms of Service (TOS): The ongoing fraudulent activities associated with this domain warrant immediate suspension or termination of services as per your TOS, which reserves the right to take such actions against violators.
Applicable Laws (Unknown):
Computer Fraud and Abuse Act (CFAA): This U.S. federal law prohibits unauthorized access to computers and networks, which is applicable to phishing schemes that deceive users into providing sensitive information.
Wire Fraud Statute (18 U.S.C. § 1343): This law criminalizes schemes to defraud individuals or entities using electronic communications, which is relevant to the fraudulent activities conducted via gepomex.com.
Anti-Phishing Consumer Protection Act: This legislation aims to combat phishing and similar fraudulent schemes, making it illegal to engage in deceptive practices that mislead consumers.
Regulatory Note: Failure to take immediate action against this domain may expose your organization to legal liabilities and regulatory scrutiny. Compliance with applicable laws and your own policies is imperative to mitigate risks associated with domain abuse.
Historique des signalements 1
- Signalement 1 Phishing Abuse Report: gepomex[.]com
Data Coverage
Signaux de sécurité
Renseignements sur la sécurité réseau
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| OpenDNS | gepomex.com |
phishing | Phishing Block |
| DNS4EU | gepomex.com |
malicious | Sinkholed |
| Hagezi Threat Feed | gepomex.com |
malicious | Sinkholed |
Processus de réponse aux menaces Pipeline
Couverture des listes de blocage
10 sources externes surveillées · instantané du 11/08/2026
10 sources externes surveillées Aucune correspondance
Chronologie de détection
-
Cloudflare Radar
Analyse Cloudflare Radar enregistrée · Ouvrir l’analyse
Capture enregistrée
Informations sur les domaines
Détails techniquesDNS, noms TLS et horodatages
ICANN OVERSIGHT
Contexte de l’accréditation et du RAA
Contexte de l’accréditation et du RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Analyse VirusTotal
Ce site vous a-t-il affecté ?
Si vous avez saisi des informations d'identification de compte, des informations personnelles ou de paiement, ou téléchargé un fichier à partir de ce domaine, agissez immédiatement. Vous trouverez ci-dessous des ressources pour vous aider à signaler l'incident et à vous protéger.
Signalez-le à vos autorités locales
Sélectionnez votre pays pour obtenir contacts officiels en matière de cybercriminalité ou créer un projet de plainte →.
Vérifier n'importe quel domaine
Analyse des menaces à l'aide de listes de blocage stockées, de WHOIS, de DNS et de preuves d'analyse publique
Scanner maintenantSignaler une tentative d'hameçonnage
Signalez les domaines suspects à notre base de données des menaces — protégez la communauté
SignalerFlux d'alertes en temps réel
Rapports de phishing récents et changements de disponibilité observés
SurveillerRestez informés, restez en sécurité
Surveillez les menaces en temps réel ou signalez cette alerte si vous pensez qu'il s'agit d'un faux positif