vegorex[.]com

Analysis of the domain vegorex.com indicates a targeted brand impersonation campaign impersonating x.com, classified as an elevated-risk crypto scam. The domain was registered on February 21, 2026, through Global Domain Group LLC, a registrar frequently associated with high-volume phishing infrastructure. Infrastructure analysis reveals the domain resolves to the IP address 104.21.92.237, hosted by Cloudflare, Inc. in Canada, a common proxy service utilized to obscure malicious endpoints. The SSL certificate is issued by WE1, a provider often observed in low-reputation or ephemeral phishing domains.

The page title, 'Vegorex: Elon Musk’s Official Crypto Casino Powered by Blockchain,' explicitly references x.com’s brand identity and leverages a fabricated association with Elon Musk to lend credibility to the scam. This aligns with the identified phishing kit, Gambler Scam, which specializes in fraudulent crypto gambling platforms. Detection metrics indicate limited but notable coverage: the domain appears on one security blocklist (PhishDestroy) and is flagged by 10 of 93 security vendors on VirusTotal, suggesting moderate but incomplete detection across the industry. As of July 24, 2026, the domain has been taken offline, though historical resolution data and registration details remain relevant for retrospective threat intelligence.

Defenders are advised to monitor for re-registration or re-emergence of the domain under alternative TLDs or slight variations in spelling. Network-level protections should include blocking the resolved IP (104.21.92.237) and monitoring for related SSL certificates issued by WE1. Given the explicit brand impersonation and crypto scam classification, security teams should prioritize alerting users to the risks of fraudulent crypto platforms masquerading as legitimate services, particularly those invoking high-profile figures or brands.