neidax[.]com

This domain, neidax.com, was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED on February 21, 2026. The authoritative DNS resolves to the IP address 172.67.191.76, which belongs to AS13335 Cloudflare, Inc. and is geolocated in the United States. The site presents a page titled “Neidax: Most Popular Online Crypto Casino Based on Blockchain,” and the SSL certificate is identified as WE1, indicating a standard Cloudflare‑issued certificate. The infrastructure has been flagged by multiple security services: Gridinsoft assigns a trust score of 1 out of 100, and the domain appears on a single security blocklist.

VirusTotal records show that 14 of 95 scanned vendors flagged the domain as malicious, and the anti‑phishing platform PhishDestroy has taken the site offline. The campaign is classified as a crypto‑related scam and is associated with the “Gambler Scam” phishing kit. The brand impersonated in the lure is the social platform x.com, which is explicitly listed as the target brand. The observed evidence suggests that the operator is leveraging a legitimate CDN provider to hide the true origin of the malicious payload while presenting a cryptocurrency gambling narrative to lure victims.

At present the domain is offline, but the registration details remain active, and the resolver IP continues to be hosted on a public cloud service, which could be reused for future campaigns. Defenders should monitor for re‑registration of the domain, block the resolved IP address at the network perimeter, and add the domain and associated IP to internal threat intelligence feeds. Continuous observation of Cloudflare‑hosted IP ranges for similar page titles or kit signatures is advised, as is the inclusion of the domain in URL filtering policies for users of the x.com platform.