gudomex[.]com

The domain gudomex.com has been identified as a brand impersonation phishing site, specifically targeting x.com by promoting a fraudulent cryptocurrency casino falsely attributed to Elon Musk. The site is currently offline, but its malicious intent was clear: it attempted to lure users into a crypto drainer scheme under the guise of an official Elon Musk-backed platform. This threat was uncovered by PhishDestroy, which classifies the risk level as elevated given the sophisticated branding and use of a trusted name.

Technical analysis reveals several red flags. The domain was registered on January 5, 2026, through Hello Internet Corp, a registrar often associated with low-effort phishing operations. It resolves to IP address 172.67.129.17, which is linked to Cloudflare but also appears on one security blocklist. VirusTotal data shows that 6 out of 95 security vendors flagged the domain as malicious, a moderate detection rate that underscores its deceptive nature. The SSL certificate issued is WE1, which provides encryption but does not guarantee legitimacy. Notably, the page title explicitly mentions "Elon Musk’s Official Crypto Casino," a clear attempt to exploit his public persona for credibility.

Given that the site is now offline, the immediate risk to users has diminished. However, PhishDestroy recommends that individuals who may have interacted with gudomex.com remain vigilant. If any credentials or cryptocurrency were provided, they should be considered compromised. Users are advised to monitor their accounts for unauthorized activity and to avoid engaging with unsolicited promotions of crypto casinos or investment opportunities. Always verify the authenticity of websites through trusted sources like PhishDestroy before sharing personal or financial information.