veozax[.]com

The domain veozax.com was registered through NiceNIC International Group Co., Limited on October 13, 2025. DNS resolution points to IP address 172.67.142.197, which belongs to AS13335 Cloudflare, Inc. and is geolocated in the United States. Both authoritative nameservers, darl.ns.cloudflare.com and elisabeth.ns.cloudflare.com, are Cloudflare‑managed, indicating the use of Cloudflare’s proxy and CDN services. No SSL certificate was observed for the host, meaning the site was serving content over plain HTTP only.

The page title retrieved from the site, "Veozax: Most Popular Online Crypto Casino Based on Blockchain," aligns with the classification of a crypto‑related scam and the identified phishing kit is listed as "Gambler Scam." The domain is explicitly targeting the brand x.com, constituting a brand‑impersonation campaign. Trust assessment from Gridinsoft assigns a score of 0 out of 100, reflecting a lack of reputation. Detection services have recorded activity: PhishDestroy has blocked the domain, and it appears on one external security blocklist. VirusTotal analysis shows that six of ninety‑five scanning engines flagged the domain as malicious.

The site was reported as taken offline at the time of assessment. While the current offline status suggests the immediate threat is mitigated, the infrastructure—particularly the Cloudflare‑hosted IP and the identified kit—could be reused for future campaigns. Defenders should continue to block veozax.com and its associated IP address, monitor for re‑appearance of the domain or similar registrants, and incorporate the observed indicators of compromise into threat‑intel feeds. Additional scrutiny of any new domains resolving to the same Cloudflare IP range and employing the Gambler Scam kit is recommended to pre‑empt recurrence.