reomaxx[.]com

On July 25, 2026, the domain reomaxx.com was identified as an inactive crypto‑scam infrastructure that impersonates the legitimate brand x.com. The domain was registered on August 28, 2025 through NiceNIC International Group Co., Limited and has never presented a valid TLS certificate, indicating that any traffic would have been delivered over plain HTTP. DNS resolution points to the IP address 188.114.97.3, which belongs to AS13335 Cloudflare, Inc. and is geolocated to the United States. The authoritative nameservers are autumn.ns.cloudflare.com and sri.ns.cloudflare.com, both owned by Cloudflare, suggesting the operator leveraged Cloudflare’s CDN and DNS services to obscure the true hosting environment.

The site’s only observed content is the page title “Reomaxx: Most Popular Online Crypto Casino Based on Blockchain”, which aligns with the recorded scam type of a crypto scam and the use of a “Gambler Scam” phishing kit. The low Gridinsoft trust score of 1 out of 100 reinforces the malicious intent. The domain appears on a single security blocklist and was actively blocked by the PhishDestroy service. VirusTotal analysis returned detections from two of ninety‑five scanning engines, confirming that at least a subset of security products recognize the domain as malicious.

Because the site is currently taken offline, direct observation of the payload is not possible, leaving the exact phishing landing page and any credential‑harvesting mechanisms unverified. Nonetheless, the combination of a brand‑impersonation claim, the crypto‑casino narrative, and the use of a known gambling‑related phishing kit provides a clear indication of the intended fraud vector. Defenders should add reomaxx.com to URL filtering and DNS blocklists, monitor traffic to the associated Cloudflare IP address for any future re‑use, and consider extending blocklist coverage to the observed nameservers.