chipmixer[.]cn[.]com

The domain chipmixer.cn.com currently resolves to 104.21.56.43, an IP owned by Cloudflare (AS13335) and geolocated in the United States. HTTP requests receive a 301 redirect and the site presents a TLS certificate issued by Google Trust Services under the WE1 identifier. Registration data shows the domain was created through Instra Corporation Pty Ltd. The only visible page title is “88CLB - Website Nhà Cái 88CLB.COM Uy Tín Xanh Chín T8/2025”, which references a Vietnamese betting service, suggesting the site may be attempting to lure users of that brand. VirusTotal analysis recorded a single positive detection out of 95 scanners, and Gridinsoft assigned a trust score of 0 / 100. The domain is listed on one public blocklist and has been blocked by the PhishDestroy service. Detected technologies include Cloudflare and HTTP/3, and the authoritative nameservers are ns1‑ns4.centralnic.net. The infrastructure remains active as of the report date. No public samples of the landing page or credential‑harvesting forms have been released, so the exact malicious behavior is not yet verified. Defenders should treat chipmixer.cn.com as high‑risk, enforce DNS‑level blocking, monitor for traffic to the associated IP, and consider adding the domain to internal blocklists. Ongoing observation is recommended to capture any future payload or credential‑collection activity.