vexora[.]cc

Analysis of vexora.cc shows a short‑lived domain created on 4 January 2026 and presently taken offline. The site resolved to the IP address 188.114.96.3, which belongs to Cloudflare, Inc. (AS13335) and is geolocated in the United States. The TLS certificate presented the identifier “WE1”, indicating a generic or self‑signed certificate rather than a brand‑validated chain. The page title retrieved from the site was “Vexora: Most Popular Online Crypto Casino Based on Blockchain”, confirming that the domain was used to promote a cryptocurrency‑focused gambling service. Registration records list NICENIC INTERNATIONAL GROUP CO., LIMITED as the registrar, a provider frequently associated with disposable or rapidly‑registered domains.

Threat intelligence sources label the activity as a crypto‑scam employing the publicly known “Gambler Scam” phishing kit. VirusTotal scans returned detections from 18 of 93 security vendors, reflecting a moderate level of malicious classification. AlienVault OTX references the domain in a single pulse, and PhishDestroy has already blocked it. Independent scoring systems rate the site extremely poorly; Gridinsoft assigns a trust score of 1 out of 100, and the domain appears on one additional security blocklist.

While the infrastructure is currently offline, the combination of a Cloudflare edge IP, a generic SSL certificate, a newly registered domain, and multiple vendor detections indicates a purpose‑built phishing or fraud operation targeting cryptocurrency enthusiasts. Defenders should continue to block the domain at network perimeter devices, update URL filtering and threat‑intel feeds with the domain and its associated IP, and monitor for any re‑use of the same registrar or kit in future campaigns.