loarex[.]com

Analysis of the domain loarex.com, registered on February 21, 2026, indicates active participation in a crypto scam campaign impersonating the brand x.com. The domain resolves to IP address 172.67.197.186, hosted on Cloudflare’s network (AS13335) in the United States. Infrastructure analysis reveals the use of Cloudflare nameservers (aarav.ns.cloudflare.com and ophelia.ns.cloudflare.com) and no SSL certificate, increasing exposure to interception risks. The page title, 'Loarex: Most Popular Online Crypto Casino Based on Blockchain,' aligns with the scam classification provided in threat intelligence as a 'Gambler Scam,' a subtype of crypto fraud.

Detection data from July 23, 2026, shows the domain is flagged by 12 of 93 security vendors on VirusTotal and appears on one security blocklist. The domain was registered through NiceNIC International Group Co., Limited, a registrar frequently associated with high-risk domains. At the time of assessment, the domain has been taken offline, though prior activity suggests it was operational long enough to engage targets. Gridinsoft’s trust score of 1/100 further supports the elevated risk classification.

While the exact content and interaction flow remain unanalyzed, the available evidence confirms brand impersonation targeting x.com users. Defenders should treat this domain as malicious and update blocklists accordingly. Monitoring for re-registration or DNS changes is recommended, as domains hosted on Cloudflare infrastructure are often reactivated under new configurations. No additional indicators of compromise or related infrastructure were identified in the provided data.