vaovex[.]com

The domain vaovex.com was first registered on February 21, 2026 through NiceNIC International Group Co., Limited and is presently listed as taken offline. Infrastructure analysis shows the domain resolves to the Cloudflare edge address 104.21.11.47, belonging to AS13335 (Cloudflare, Inc.) and is geolocated in the United States. No SSL certificate is presented, indicating the site operated without HTTPS protection. Authoritative nameservers are jo.ns.cloudflare.com and odin.ns.cloudflare.com, confirming the use of Cloudflare’s DNS service. The site’s page title, "Vaovex: Most Popular Online Crypto Casino Based on Blockchain," signals a crypto‑focused gambling theme and aligns with the classified scam type of a Crypto Scam.

The page explicitly impersonates the brand x.com, which is recorded as the target brand for this impersonation campaign. Threat intelligence indicates the site employed the Gambler Scam phishing kit, a known template used to lure victims into fraudulent cryptocurrency gambling offers. Detection evidence shows the domain appears on one security blocklist and is blocked by PhishDestroy. VirusTotal scans flagged the domain by 15 of 93 security vendors, and AlienVault OTX references the domain in a single threat pulse.

The Gridinsoft trust score of 1 out of 100 further underscores the malicious reputation. While the site is currently offline, the observed infrastructure—Cloudflare hosting, lack of TLS, and use of a gambling‑oriented phishing kit—suggests a low‑cost, rapidly deployed impersonation operation targeting users of x.com. Defenders should continue to block the domain at network perimeter controls, monitor for any re‑hosting attempts on alternative IP ranges, and incorporate the domain’s indicators (IP address, nameservers, and observed page title) into threat‑intel feeds. Ongoing vigilance is recommended given the recent registration date and the active involvement of multiple detection vendors.