ruxplay[.]com

Analysis of ruxplay.com shows a domain created on August 27 2025 and registered through Web Commerce Communications Limited. The authoritative nameservers are maisie.ns.cloudflare.com and malcolm.ns.cloudflare.com, indicating Cloudflare DNS services. DNS resolution points to IP address 188.114.97.3, which belongs to AS13335 Cloudflare, Inc. and is geolocated in the United States. The domain currently resolves to an IP that hosts no SSL certificate, meaning the site is served only over HTTP. The page title returned from the host reads “Ruxplay: Most Popular Online Crypto Casino Based on Blockchain,” suggesting an attempt to present a cryptocurrency‑focused gambling service.

The domain is listed on a single security blocklist and has been flagged by PhishDestroy as a malicious resource. Gridinsoft assigns a trust score of 1 out of 100, indicating extreme suspicion. The phishing kit associated with the domain is identified as a Gambler Scam, aligning with the casino‑themed page title. The overall scam classification is a crypto scam, and the threat type is recorded as generic phishing. VirusTotal reports that the site was scanned by 95 antivirus vendors without any detections at the time of scanning; this lack of detection does not constitute proof of benign intent.

The domain’s current operational status is “taken offline,” limiting direct observation of the payload or credential‑harvesting mechanisms. Consequently, concrete evidence of the specific phishing content cannot be confirmed, but the combination of a high‑risk kit, low trust score, blocklist presence, and absence of TLS strongly supports a malicious intent. Defenders should treat ruxplay.com as a high‑confidence phishing indicator. Recommended actions include adding the domain to outbound and inbound filtering rules, monitoring DNS queries for the associated Cloudflare IP range, and reviewing any recent traffic logs for attempts to contact the domain before it was taken offline.