noferex[.]com

Analysis of the domain noferex.com shows a newly registered infrastructure used for brand impersonation targeting SEI. The domain was created on February 21, 2026 and registered through Global Domain Group LLC. DNS resolution is handled by Cloudflare, with authoritative name servers crystal.ns.cloudflare.com and john.ns.cloudflare.com, and the A record points to 104.21.65.232, an IP address owned by AS13335 Cloudflare, Inc. located in the United States. The site presents a TLS certificate issued by Google Trust Services under the WE1 label, consistent with Cloudflare‑provided SSL. An HTTP request to the domain returns a 403 status code, indicating the web service is currently inaccessible or deliberately blocked.

The page title “Noferex: Elon Musk’s Official Crypto Casino Powered by Blockchain” and the classification as a Crypto Scam reveal an attempt to lure victims with a high‑profile cryptocurrency casino narrative while impersonating the SEI brand. Gridinsoft assigns a trust score of 1 out of 100, confirming a high malicious likelihood. VirusTotal analysis shows 13 of 93 scanning engines flag the domain, and it is listed on a single security blocklist. The domain is also blocked by PhishDestroy and has been linked to the Gambler Scam phishing kit.

Current status is offline, and no additional content has been captured. Defenders should immediately add noferex.com to DNS and proxy blocklists, monitor for any re‑registration or IP changes, and update intrusion detection signatures to include the observed Cloudflare name servers and IP range. Continuous threat‑intelligence feeds should be consulted for reappearances, and any outbound connections to the associated IP should be logged and investigated.