furymex[.]com

On July 23, 2026, analysis was performed on the domain furymex.com, which is currently flagged as offline. The domain was registered on February 21, 2026 through Hello Internet Corp and immediately began serving a page titled “Furymex: Elon Musk’s Official Crypto Casino Powered by Blockchain.” The page title indicates a brand‑impersonation attempt targeting x.com, positioning the site as a crypto casino linked to Elon Musk. The infrastructure uses Cloudflare’s network (ASN 13335) with the public address 172.67.143.176 and the authoritative name servers ivy.ns.cloudflare.com and sergi.ns.cloudflare.com. No SSL certificate was observed, meaning the site served over HTTP only.

Reputation checks show that 11 of 93 scanners on VirusTotal flagged the domain, and it appears on one external blocklist. PhishDestroy has already blocked the host, and Gridinsoft assigned a trust score of 0 out of 100. The associated malicious kit is identified as “Gambler Scam,” consistent with the crypto‑casino narrative. Evidence gaps remain: the site is offline, preventing direct retrieval of HTML content, HTTP status codes, or confirmation of any credential‑capture forms.

Consequently, the exact payload and any embedded malware cannot be verified at this time. Nevertheless, the combination of brand impersonation, known phishing kit, low trust score, and multi‑vendor detections warrants a high confidence classification as an elevated‑risk crypto scam. Defenders should add furymex.com to URL filtering rules, block the associated IP address (172.67.143.176) and its Cloudflare AS13335 range, monitor for newly registered domains using Hello Internet Corp as registrar, and keep the domain listed on internal blocklists. Regular re‑scans are recommended in case the site is re‑hosted or the certificate status changes.