yomemex[.]com

The domain yomemex.com was registered on 21 February 2026 through Global Domain Group LLC. Authoritative nameservers raina.ns.cloudflare.com and walt.ns.cloudflare.com place the domain under Cloudflare’s infrastructure (ASN 13335, United States). DNS resolution resolves to the IPv6 address 2606:4700:3036::6815:49b2, a Cloudflare edge node. No TLS certificate was observed, indicating the site would have been served over plain HTTP. The page title captured during the brief live interval identified the site as “Yomemex: Elon Musk’s Official Crypto Casino Powered by Blockchain,” directly invoking Elon Musk and promoting a crypto‑casino service.

This content aligns with the declared brand target x.com, confirming a brand‑impersonation motive. Malware and phishing analysis tools classified the activity as a crypto scam employing the publicly known “Gambler Scam” kit. VirusTotal scans returned twelve detections out of ninety‑three vendors, and the domain appears on a single public blocklist (PhishDestroy). Independent reputation scoring (Gridinsoft) assigned a trust score of 1 out of 100, reflecting extreme malicious confidence.

The site was taken offline before the report date, yet the infrastructure artifacts remain valuable for detection. Defenders should block yomemex.com at the DNS and proxy layers, sinkhole the associated IPv6 address, and monitor for new domains that share the same Cloudflare nameservers or registrar for rapid copycat campaigns. Continuous threat‑intel feeds should be queried for other domains referencing “Elon Musk” or “crypto casino” in their titles, as the Gambler Scam kit frequently resurfaces with minor variations. Given the low trust score and multiple vendor detections, any inbound traffic to yomemex.com should be treated as malicious, and associated URLs should be quarantined in email and web filtering solutions.