jeonax[.]com

On July 25 2026 analysts observed that the domain jeonax.com was taken offline after being identified as a brand‑impersonation site targeting x.com. The domain was registered on 04 September 2025 through NiceNIC International Group Co., Limited and is hosted on Cloudflare infrastructure (nameservers fiona.ns.cloudflare.com and miles.ns.cloudflare.com). DNS resolution points to IP address 172.67.182.123, which belongs to AS13335 Cloudflare, Inc., and is geolocated in the United States. No TLS certificate was presented when the site was reachable, indicating the absence of HTTPS protection.

The page title returned by the server reads “Jeonax: Most Popular Online Crypto Casino Based on Blockchain,” suggesting a crypto‑casino narrative consistent with the listed scam type “Crypto Scam.” Threat intelligence classifies the payload as the “Gambler Scam” phishing kit. Reputation services show a Gridinsoft trust score of 1 out of 100 and the domain appears on a single security blocklist. PhishDestroy has already blocked the site, and VirusTotal records indicate that 2 of 95 scanning engines flagged the domain as malicious. The limited detection coverage and low trust score reinforce the elevated risk rating.

At present the site is offline, so active verification of its content is not possible; however, the combination of brand impersonation, low trust metrics, and association with a known gambling‑related phishing kit provides sufficient evidence for defensive actions. Organizations should add jeonax.com to web‑filter deny lists, monitor DNS queries for the domain, and consider broader indicators such as its IP address and Cloudflare nameservers for correlation with related campaigns. Continuous observation of emerging detections is advised, as additional security vendors may update their verdicts.