xverion[.]com

Domain xverion.com was created on 13 October 2025 and is currently taken offline. The site resolved to the Cloudflare edge address 172.67.138.207, which is associated with ASN 13335 (Cloudflare, Inc.) and geolocated to the United States. No TLS certificate was presented, indicating the service was reachable only over HTTP. The authoritative nameservers daisy.ns.cloudflare.com and rocky.ns.cloudflare.com confirm the use of Cloudflare’s DNS infrastructure.

The page title retrieved during the brief crawl reads “Xverion: Most Popular Online Crypto Casino Based on Blockchain,” aligning with the listed scam type “Crypto Scam” and the identified phishing kit “Gambler Scam.” Gridinsoft assigned a trust score of 1 out of 100, and the domain appears on a single security blocklist. PhishDestroy has already blocked the domain, and VirusTotal recorded 12 detections out of 95 scanning engines. Registration was performed through GRANSY S.R.O D/B/A SUBREG.CZ, a Czech registrar often used by malicious actors. The combination of a brand‑agnostic crypto‑casino theme, low trust score, multiple vendor detections, and Cloudflare hosting suggests a typical credential‑harvesting operation targeting cryptocurrency users.

Uncertainty remains regarding the exact payload delivered to victims, as no static content analysis is available beyond the page title. Defenders should add 172.67.138.207 to network‑level deny lists, enforce blocking of HTTP traffic to xverion.com, and monitor for other domains registered by the same registrar that resolve to Cloudflare IP ranges. Continuous observation of emerging detections on VirusTotal and blocklist feeds is advised to capture any re‑hosting attempts.