gedopex[.]com

This domain is flagged as an active brand impersonation threat targeting crypto gambling enthusiasts. Analysis indicates the site falsely presents itself as an official Elon Musk-affiliated crypto casino, leveraging social engineering to deceive users into depositing cryptocurrency under fraudulent pretenses. The threat type is classified as elevated due to its sophisticated impersonation tactics and integration of tracking technologies commonly used in malicious advertising campaigns. Infrastructure analysis reveals the domain gedopex.com was registered on May 20, 2026, through Fewmoretaps OU d/b/a Trustname.com. It resolves to the IPv6 address 2a06:98c1:3121::3 and employs Cloudflare for hosting, alongside tracking technologies such as Twitter Ads and Facebook Pixel. Security vendor detections on VirusTotal report 15 out of 95 engines flagging the domain as malicious, while it appears on one security blocklist. The domain is also blocked by at least one anti-phishing system. A Let's Encrypt SSL certificate is used to encrypt traffic, adding a veneer of legitimacy to the fraudulent operation. Mitigation steps for this specific threat type include blocking the domain and its associated IP address at the network perimeter. Organizations should update endpoint protection rules to detect and prevent access to the domain, particularly in environments where crypto-related activities are common. Users should be educated on recognizing brand impersonation tactics, such as unsolicited offers tied to high-profile figures like Elon Musk, and verify the legitimacy of gambling or crypto platforms through official channels. Monitoring for similar domains registered through the same registrar may help preemptively identify related threats.