play[.]teupox[.]com

play.teupox.com is currently active and serves a page titled “Teupox: Most Popular Online Crypto Casino Based on Blockchain”. The site presents a valid TLS certificate issued by Let’s Encrypt (certificate identifier YE2) and returns HTTP 200 responses from the Cloudflare‑provided address 172.67.144.147, which geo‑locates to Canada. Registration details list Fewmoretaps OU d/b/a Trustname.com as the registrar, and the authoritative name servers are julian.ns.cloudflare.com and melody.ns.cloudflare.com. VirusTotal records indicate that 13 of 91 scanned security engines flag the domain, and it appears on a single external blocklist, currently listed by PhishDestroy. The combination of a crypto‑casino lure and the detection profile aligns with a generic phishing campaign targeting cryptocurrency enthusiasts. No additional technical indicators such as malware payloads, credential‑stealing forms, or redirection chains have been disclosed, leaving the exact phishing vector uncertain. Defensive teams should add play.teupox.com to URL filtering and sink‑hole rules, ensure TLS inspection is enabled to capture any hidden payloads, and monitor traffic to the Cloudflare IP range for anomalous activity. Continuous re‑scanning on VirusTotal and cross‑checking against emerging blocklists are recommended to maintain up‑to‑date protection.