fezodex[.]com

fezodex.com was observed hosting a fraudulent cryptocurrency casino front, as indicated by the page title “Fezodex: Most Popular Online Crypto Casino Based on Blockchain”. The site employed the publicly‑known “Gambler Scam” phishing kit, which is frequently used to lure victims into depositing crypto under false pretenses. Registration information shows the domain was created on 26 October 2025 through Dominet (HK) Limited, a Hong‑Kong registrar often associated with malicious registrations. DNS resolution points to the Cloudflare network (AS13335) with the address 104.21.15.184, and the authoritative nameservers are elisa.ns.cloudflare.com and tadeo.ns.cloudflare.com. No TLS certificate was presented, meaning the site operated over plain HTTP, a characteristic that reduces trust and facilitates content manipulation.

Reputation services flag the domain heavily. Google Safe Browsing classifies it as “social engineering”, and PhishDestroy has placed it on its blocklist. Additionally, the domain appears on one additional security blocklist. On VirusTotal, 10 of 95 scanners reported malicious activity, corroborating the presence of the Gambler Scam kit. Gridinsoft assigned a trust score of 0 out of 100, indicating an extremely low confidence in the site’s legitimacy.

The overall risk rating is high, and the site is currently offline, suggesting the operators have taken it down after detection. While the infrastructure details are clear, the exact content served at the time of takedown cannot be verified because the site is no longer reachable. Analysts cannot confirm whether credential‑stealing forms were present, but the combination of the kit, branding, and detection signals strongly points to a crypto‑focused phishing operation. Defenders should add the domain, its IP address, and the associated nameservers to internal blocklists, monitor for any re‑registration attempts, and watch for similar “Gambler Scam” kit deployments targeting crypto users.