fyodix[.]top

fyodix.top was registered on October 24 2025 through Web Commerce Communications Limited. The domain resolves to IP 188.114.96.3, which is hosted by Cloudflare (AS13335) and geolocated to the United States. Nameserver records point to cruz.ns.cloudflare.com and koa.ns.cloudflare.com, confirming the use of Cloudflare’s DNS infrastructure. No TLS certificate was observed, indicating the site was served over plain HTTP at the time of takedown. The page title returned by the server was “Fyodix: Most Popular Online Crypto Casino Based on Blockchain”, consistent with the scam type listed as a crypto scam and the identified phishing kit labeled “Gambler Scam”. The domain appears on a single security blocklist and has been blocked by PhishDestroy.

In the Open Threat Exchange, the domain was referenced in one threat‑intelligence pulse. VirusTotal analysis shows that twelve of ninety‑five scanned security vendors flagged the domain, reflecting a mixed detection profile. Gridinsoft assigned a trust score of zero out of one hundred, reinforcing the malicious assessment. The current operational status is offline, and the site is no longer reachable. Analysis indicates that the infrastructure leverages Cloudflare’s CDN and DNS services, a common tactic to obscure the true origin of malicious hosts.

The lack of an SSL certificate suggests the operators relied on HTTP to avoid certificate costs or scrutiny. The presence of a “Gambler Scam” kit aligns with the promotional language in the page title, targeting users interested in cryptocurrency gambling. However, the limited number of blocklist listings and the relatively low VirusTotal detection count leave uncertainty regarding the breadth of distribution and victim exposure. Defenders should continue to monitor the associated IP address 188.114.96.3 for any reappearance of malicious content, enforce outbound filtering for HTTP traffic to unknown domains, and incorporate the domain and its IP into threat‑intelligence feeds.