stormixbet[.]com

Analysis of stormixbet.com shows a newly registered domain (creation date October 04 2025) that was used to host a crypto‑focused gambling scam and is now offline. The domain resolves to IP 172.67.144.153, an address owned by Cloudflare (AS13335) located in the United States. No SSL certificate is presented, indicating the site operated over plain HTTP. The page title returned from the server reads “Stormixbet: Most Popular Online Crypto Casino Based on Blockchain,” which aligns with the identified scam type of a crypto casino phishing campaign.

VirusTotal records indicate that 14 of 93 scanned security vendors flagged the domain, providing independent corroboration of malicious intent. The site is associated with the publicly known “Gambler Scam” phishing kit, and its trust score from Gridinsoft is 0 out of 100, reflecting an extremely low reputation. Registration was handled through Dominet (HK) Limited, and the domain uses Cloudflare’s default name servers (fatima.ns.cloudflare.com and skip.ns.cloudflare.com). It appears on a single security blocklist and has been actively blocked by the PhishDestroy service.

While the site is currently taken offline, defenders should retain the indicators of compromise—including the domain name, resolved IP address, name server entries, and the observed page title—to enrich URL filtering rules and threat‑intel feeds. Monitoring for re‑use of the same IP range or similar page titles is advisable, as threat actors often redeploy identical infrastructure. Because the domain’s content cannot be presently examined, any future re‑appearance should be treated as high‑confidence malicious activity pending further analysis.