upxcasino[.]pro

upxcasino.pro is a newly registered domain (created 26 Dec 2024) that currently resolves to 172.67.142.203, an address owned by AS13335 Cloudflare, Inc. in the United States. The domain was registered via the REGRU‑RU registrar and is served by the Cloudflare nameservers cullen.ns.cloudflare.com and penny.ns.cloudflare.com. No TLS certificate is present, meaning the site is only reachable over HTTP. The public page title reads “UPXCASINO | Play at the best online casino based on Blockchain”, indicating a cryptocurrency‑focused gambling lure.

Intelligence links the site to a Gambler Scam phishing kit and classifies the operation as a crypto scam. The domain is listed on a single security blocklist and has been flagged by PhishDestroy as taken offline. VirusTotal analysis shows one of ninety‑three scanning engines reporting a detection, confirming at least one security vendor considers the domain malicious. The site purports to impersonate the brand “foundation”, although the exact nature of the impersonation cannot be verified without page content.

Defenders should add 172.67.142.203 to network deny lists, block the domain and its associated nameservers, and monitor Cloudflare‑hosted IP ranges for similar newly created domains. Continuous observation of the REGRU‑RU registrar activity is advised, as well as periodic re‑scanning of the domain should it become active again. Until further evidence is obtained, the domain should be treated as a high‑confidence malicious indicator.