rezofex[.]com

On July 25, 2026, the domain rezofex.com was observed to host a fraudulent crypto‑casino landing page that advertises itself as “Rezofex: Most Popular Online Crypto Casino Based on Blockchain”. The site resolved to the IPv4 address 188.114.96.3, which is owned by Cloudflare, Inc. (ASN 13335) and geolocated to the United States. Authority records list meg.ns.cloudflare.com and odin.ns.cloudflare.com as the authoritative name servers, confirming the use of Cloudflare’s DNS service. The domain was registered on 12 November 2025 through Dominet (HK) Limited, a registrar based in Hong Kong. No TLS certificate was presented, indicating that the site was served over plain HTTP at the time of capture. Threat intelligence classifies the page as a crypto‑scam that leverages a “Gambler Scam” phishing kit.

VirusTotal reports that 11 out of 93 scanning engines flagged the domain as malicious, reinforcing the suspicion of malicious intent. The domain appears on a single public blocklist and has been taken offline by the PhishDestroy mitigation service, which suggests that active mitigation was applied after detection. Gridinsoft assigned a trust score of 0 out of 100, reflecting a complete lack of legitimacy. Because the site is currently offline, direct content analysis is limited to the page title and metadata. The absence of an SSL certificate, combined with the use of Cloudflare’s free DNS, is a pattern frequently observed in short‑lived phishing infrastructure.

The registration date, less than one year old, aligns with the rapid turnover typical of malicious domains. However, the precise payload delivered to victims, the extent of credential or cryptocurrency theft, and any associated command‑and‑control endpoints remain unknown. Defenders should continue to block rezofex.com at DNS and HTTP filters, monitor for any resurgence of the domain or its associated IP address, and add the IP 188.114.96.3 to watchlists for potential reuse.