quizbits[.]game

Analysis of quizbits.game, created on September 03, 2025 and currently listed as active, shows a clear indication of malicious activity. The site returns HTTP status 200 and presents the page title “Quizbits - Real-time Multiplayer Quiz Game,” which matches the content reported by passive scanners. Infrastructure inspection reveals the domain resolves to IP 66.33.22.95, an address registered to AS400940 Railway in the United States. The hosting stack consists of Node.js, Envoy, React, Next.js, Webpack, and an HSTS‑enabled front end protected by Cloudflare, all typical of modern web applications but not evidence of legitimacy in this context.

The SSL certificate is issued by Let’s Encrypt (E8), a free certificate authority commonly used by both benign and malicious operators. Registrar information shows the domain was registered through NameCheap, Inc., and the authoritative name servers are dns1.registrar-servers.com and dns2.registrar-servers.com. MX records include eforward1.registrar-servers.com with priority 10, suggesting standard email routing but offering no defensive value. Reputation signals are strongly negative: Gridinsoft assigns a trust score of 0 / 100, and the domain appears on one security blocklist.

PhishDestroy has already blocked the site, and VirusTotal reports a single detection out of 95 scanning engines, confirming at least one vendor flags the domain as malicious. The identified phishing kit is classified as an “Airdrop Scam,” indicating the site is likely used to lure victims with false cryptocurrency airdrop promises. Defenders should immediately add quizbits.game to network‑level blocklists, enforce DNS filtering to prevent resolution, and monitor outbound connections to the associated IP address. Continuous threat‑intel feeds should be consulted for any new detections, and any internal accounts that may have interacted with the domain should be reviewed for credential compromise.