rawox[.]pro

Analysis on July 24, 2026 shows rawox.pro is currently offline. The domain resolves to 104.21.56.101, an address owned by Cloudflare, Inc. (AS13335, United States). Cloudflare is also the registrar and supplies the authoritative nameservers nancy.ns.cloudflare.com and randall.ns.cloudflare.com. No TLS certificate was observed, indicating the site does not serve HTTPS. The page title returned when the site was reachable reads “Rawox: Most Popular Online Crypto Casino Based on Blockchain,” which aligns with the classified scam type of a crypto‑related scam.

The infrastructure is associated with the Gambler Scam phishing kit, a known template used to lure victims into fraudulent cryptocurrency gambling services. Trust scoring from Gridinsoft assigned a zero out of one hundred, reflecting a complete lack of credibility. The domain appears on a single security blocklist and is explicitly blocked by the PhishDestroy service. VirusTotal analysis recorded ten positive detections out of ninety‑five submitted scanners, confirming that multiple security vendors consider the domain malicious.

The combination of a zero trust score, absence of SSL, presence on a blocklist, and multiple vendor detections indicates a high likelihood of malicious intent. However, because the site is offline, the current content cannot be verified, and no additional payload or redirect behavior is observable. Defenders should continue to block rawox.pro at network perimeters, update intrusion‑prevention signatures to include the associated IP address, and monitor for any future re‑registration or DNS changes. Threat intelligence feeds should retain the domain in watchlists, and incident response teams should treat any traffic to the IP or domain as suspicious, especially when related to cryptocurrency transactions.