paorex[.]com

Analysis of paorex.com confirms its classification as a crypto scam domain impersonating x.com, currently offline as of July 24, 2026. The domain was registered on November 5, 2025, through Dominet (HK) Limited and resolves to IP 172.67.155.123, hosted on Cloudflare's infrastructure (AS13335) in the United States. No SSL certificate was detected, increasing the risk of unencrypted data transmission. The page title, 'Paorex: Most Popular Online Crypto Casino Based on Blockchain,' explicitly indicates the fraudulent scheme's nature, targeting users with a gambling scam.

Infrastructure analysis reveals Cloudflare nameservers (sierra.ns.cloudflare.com, sri.ns.cloudflare.com) and the absence of HTTPS, common traits in low-effort phishing operations. Detection data shows the domain appears on one security blocklist and is flagged by 11 of 95 security vendors on VirusTotal, with PhishDestroy listing it as blocked. Gridinsoft assigns a trust score of 1/100, further corroborating its malicious status. The domain is linked to a known 'Gambler Scam' phishing kit, aligning with the page title's crypto casino theme.

Defenders should treat paorex.com as a confirmed threat. Network-level blocking of the IP (172.67.155.123) and domain is recommended, alongside monitoring for related Cloudflare-hosted domains registered through Dominet (HK) Limited. While the domain is currently offline, historical detection data and infrastructure patterns suggest potential for re-emergence. No additional content analysis is available; the scam type is classified based on the page title and phishing kit association, not visual confirmation.