revolux[.]world

revolux.world is a newly registered domain created on 15 August 2025 and currently resolves to the Cloudflare‑provided address 172.67.156.43. The site is protected by Cloudflare and presents an SSL certificate issued by Google Trust Services under the WE1 identifier, indicating a valid TLS termination on the edge network. The registrar listed is Web Commerce Communications Limited and the authoritative name servers are monika.ns.cloudflare.com and patrick.ns.cloudflare.com, both owned by Cloudflare. The page title retrieved from the site reads "REVOLUX | Play at the best online casino based on Blockchain", and the associated scam classification is a crypto‑focused gambling scam. Automated analysis identified the use of a known Gambler Scam phishing kit.

Reputation scoring from Gridinsoft assigns a trust score of 0 out of 100, reflecting extreme suspicion. VirusTotal has recorded detections from four of ninety‑three scanning engines, and the domain appears on a single external blocklist, where it has also been added to the PhishDestroy blacklist. The domain’s current HTTP status is offline, suggesting the operators have taken the site down, but the artifacts remain useful for attribution and mitigation. Defenders should continue to block the domain at network perimeter and DNS layers, given its confirmed association with a crypto gambling fraud campaign.

Monitoring of the hosting IP 172.67.156.43 is advised, as Cloudflare may host additional malicious payloads under the same address. Analysts should also watch for newly created domains that reuse the same registrar or name‑server pattern, as these often serve as fresh drop‑sites for the same kit. Because the site’s content was not captured, further investigation of the exact landing page and any credential‑capture mechanisms is pending. Until such details emerge, the existing indicators provide sufficient basis for high‑confidence remediation.