getorex[.]com

Getorex.com was registered through Dominet (HK) Limited on 15 November 2025. The domain resolves to 172.67.167.23, an address owned by AS13335 Cloudflare, Inc. and located in the United States. DNS records point to IGOR.NS.CLOUDFLARE.COM and OAKLYN.NS.CLOUDFLARE.COM. No TLS certificate is presented, indicating the site is served over plain HTTP. The page title observed in the initial crawl reads “Getorex: Most Popular Online Crypto Casino Based on Blockchain”, and the infrastructure has been classified as a “Crypto Scam” using the Gambler Scam phishing kit.

The specific login interface and payload delivered to victims have not been captured, so the full phishing flow remains undocumented. The domain is currently offline, having been taken down after detection by PhishDestroy. Reputation checks show a Gridinsoft trust score of 0 / 100 and the domain appears on one security blocklist. VirusTotal analysis recorded 16 detections out of 95 scanned vendors, confirming malicious activity.

AlienVault OTX lists the domain in two threat‑intelligence pulses, further corroborating its association with phishing campaigns. The evidence indicates that the domain was used to lure victims into a cryptocurrency‑focused scam, likely by presenting a counterfeit gambling service. Defenders should block the domain at perimeter firewalls, add the IP address 172.67.167.23 to deny‑list rules, and monitor for any residual traffic to the Cloudflare nameservers. Continuous threat‑intel feeds should be consulted for updates, and any intrusion attempts that reference the page title or the Gambler Scam kit should be investigated as potential compromises.