veloxowin[.]com

Analysis on veloxowin.com shows that the domain was created on 21 February 2026 and is currently taken offline. The site was registered via Hello Internet Corp and resolves to the Cloudflare‑owned address 188.114.96.3, which is announced as being located in the United States under ASN 13335 (Cloudflare, Inc.). The authoritative nameservers are finley.ns.cloudflare.com and jo.ns.cloudflare.com, confirming the use of Cloudflare’s DNS infrastructure. No TLS certificate was observed, indicating that the site was served over plain HTTP.

The page title retrieved from the now‑inactive host reads “Veloxowin: Most Popular Online Crypto Casino Based on Blockchain,” which aligns with the listed scam type of a crypto‑focused gambling operation. Intelligence flags the site as employing the “Gambler Scam” phishing kit, a known template used to lure victims into depositing cryptocurrency under false pretenses. VirusTotal analysis recorded 16 detections out of 93 scanned security vendors, providing independent confirmation of malicious behavior. The domain appears on a single blocklist, specifically PhishDestroy, which has already added it to its phishing feed.

The combination of a recent registration, lack of encryption, use of a reputable CDN for concealment, and the presence of a gambling‑related phishing kit places the domain at an elevated risk level. Uncertainty remains regarding the exact content that was delivered before takedown, as no live HTTP response or screenshot is available. Defenders should continue to block the domain at perimeter filters, update local threat‑intel lists with the observed IP address and nameserver pair, and monitor for any re‑hosting attempts that may use the same registration details or kit. Ongoing observation of Cloudflare‑assigned IP ranges for similar phishing kits is recommended, as the infrastructure pattern suggests a low‑cost, fast‑deployment model typical of crypto‑gambling scams.