playempirex[.]com

Analysis of playempirex.com indicates a confirmed crypto scam domain targeting users through brand impersonation of x.com. The domain was registered on February 21, 2026, via MAT BAO CORPORATION and is associated with the Gambler Scam phishing kit. Infrastructure analysis reveals the domain resolved to Cloudflare IP 2606:4700:3032::6815:16d0 (AS13335, US) at the time of assessment. The page title, 'Playempirex: Most Popular Online Crypto Casino Based on Blockchain,' explicitly aligns with the reported scam type, further corroborating its fraudulent intent.

Detection data shows the domain was flagged by 12 of 93 security vendors on VirusTotal, blocked by PhishDestroy, and appears on one security blocklist. AlienVault OTX includes it in a threat intelligence pulse, while Gridinsoft assigns a trust score of 1/100, reinforcing its malicious classification. The SSL certificate issuer, WE1, is consistent with low-reputation or automated certificate providers often leveraged in phishing campaigns. As of July 23, 2026, the domain is offline, though defenders should treat its infrastructure as compromised and monitor for reactivation or related domains under the same registrar or hosting provider.

Defenders are advised to block the domain, IP, and associated SSL certificate at network and endpoint layers. Review logs for connections to 2606:4700:3032::6815:16d0 or MAT BAO CORPORATION-registered domains with similar naming patterns. Given the use of Cloudflare, additional scrutiny of traffic to AS13335 may be warranted to identify evasion attempts. No evidence suggests this campaign extends beyond the reported crypto scam classification, but continuous monitoring for shifts in tactics or infrastructure is recommended.