glatryx[.]com

Analysis of the domain glatryx.com indicates it was actively involved in a crypto scam operation impersonating the brand X.com, as evidenced by its page title and classification in threat intelligence sources. The domain was registered on September 16, 2025, through NameSilo, LLC, and was taken offline by the report date of July 24, 2026. Infrastructure analysis reveals the domain used Cloudflare nameservers (chance.ns.cloudflare.com and holly.ns.cloudflare.com) and resolved to the IP address 104.21.57.209, associated with AS13335 (Cloudflare, Inc.) in the United States. The domain was flagged by 14 of 95 security vendors on VirusTotal, though the specific detection rules or signatures are not detailed in the available evidence.

It appears on at least one security blocklist, specifically PhishDestroy, and is classified as part of a 'Gambler Scam' phishing kit. The page title, 'Glatryx: Most Popular Online Crypto Casino Based on Blockchain,' suggests the scam was designed to lure victims with promises of crypto gambling, a tactic consistent with known fraudulent schemes targeting cryptocurrency users. No SSL certificate was observed for the domain, which is atypical for legitimate financial or gambling platforms and further supports the assessment of malicious intent. The Gridinsoft trust score of 0/100 aligns with the domain's classification as high-risk.

While the domain is currently offline, defenders should treat any residual DNS records or cached content as potentially harmful. Organizations are advised to block the domain and its associated IP (104.21.57.209) at the network level and monitor for related infrastructure, such as domains registered through the same registrar or utilizing identical nameserver configurations. The absence of additional contextual data, such as victim reports or campaign duration, limits further attribution, but the available evidence confirms its role in a brand impersonation scam targeting X.com users.