nebomex[.]com

nebomex.com was registered on 21 February 2026 and currently resolves to the IP address 188.114.96.3, which is owned by Cloudflare, Inc. (AS13335) and geolocated to the United States. The domain uses the Cloudflare nameservers diva.ns.cloudflare.com and gerardo.ns.cloudflare.com. No TLS certificate is presented; HTTP connections are served without encryption. The site’s HTML title reads “Nebomex: Elon Musk’s Official Crypto Casino Powered by Blockchain”, indicating a cryptocurrency‑focused gambling narrative.

Intelligence links the page to the “Gambler Scam” phishing kit and classifies the activity as a crypto‑scam that impersonates the MEXC exchange. VirusTotal analysis shows that 12 of 93 scanning engines have flagged the domain as malicious, confirming a consensus of suspicious behavior among security vendors. The domain appears on one external blocklist and received a Gridinsoft trust score of 1 out of 100, reflecting an extremely low reputation. PhishDestroy has already taken the domain offline, and the current status is listed as “offline”.

While the page content has not been captured, the combination of brand impersonation, a high‑profile brand name in the title, and the presence of a known gambling kit strongly suggests an attempt to lure cryptocurrency users into a fraudulent casino offering. Defenders should continue to block the domain at perimeter controls, monitor for any residual DNS or IP artifacts, and add the host to internal blacklists. Additional scrutiny of traffic to Cloudflare‑hosted IP ranges that resolve to newly created domains with similar titles is advisable, as is reviewing any outbound connections from internal assets to the IP 188.114.96.3 for potential data exfiltration attempts.