coplex[.]us

This domain, coplex.us, was registered on September 18, 2025 through Web Commerce Communications Limited and is hosted on Cloudflare’s network (AS13335) with the address 104.21.81.167 located in the United States. The site resolves to two Cloudflare nameservers, coen.ns.cloudflare.com and lara.ns.cloudflare.com, and does not present a valid SSL certificate, indicating it was served over plain HTTP at the time it was taken offline. The page title returned by the server reads “Coplex: Most Popular Online Crypto Casino Based on Blockchain,” which aligns with the observed scam type of a crypto‑casino fraud. Analysis of public blocklists shows the domain appears on a single security blocklist and has been flagged by PhishDestroy.

Reputation scoring from Gridinsoft assigns a zero‑out‑of‑one‑hundred trust score, reflecting a high likelihood of malicious intent. VirusTotal scans reported three detections out of ninety‑five vendor engines, confirming that multiple security products consider the domain suspicious. The infrastructure appears to have been built using the publicly available “Gambler Scam” phishing kit, a tool commonly employed to mimic online gambling or casino services for credential harvesting and financial fraud. At the time of observation the site was already taken offline, but the combination of recent registration, lack of TLS, low trust rating, blocklist presence, and kit usage suggests a deliberately short‑lived phishing campaign targeting cryptocurrency enthusiasts.

Defenders should continue to block the domain at perimeter filters, monitor for any re‑hosting of the same IP address or nameserver pair, and consider adding the associated IP range to threat intel feeds. Additional investigation of the three VirusTotal detections may reveal specific payloads or command‑and‑control endpoints used by the campaign.