dicemyx[.]com

This investigation documents the infrastructure and risk indicators associated with dicemyx.com, a domain created on 25 September 2025 and currently reported as offline. The domain is registered through Web Commerce Communications Limited and resolves to the IP address 104.21.39.117, which belongs to Cloudflare, Inc. (AS13335) and is located in the United States. Authoritative nameservers eve.ns.cloudflare.com and noah.ns.cloudflare.com confirm that the domain is hosted behind Cloudflare’s reverse‑proxy service, a common choice for fast‑flux or anonymized phishing infrastructure. Content analysis reveals a page title of “Dicemyx: Most Popular Online Crypto Casino Based on Blockchain,” indicating a crypto‑focused gambling narrative. The site explicitly impersonates the brand x.com, placing it in the brand‑impersonation threat category.

The observed scam type is listed as “Crypto Scam,” and the underlying delivery mechanism aligns with the publicly known “Gambler Scam” phishing kit. Reputation services provide uniformly low credibility scores: Gridinsoft assigns a trust score of 1 / 100, and Scamadviser reports the same rating. VirusTotal records that two of ninety‑five scanning engines flagged the domain, and the domain appears on one external security blocklist. PhishDestroy has also listed the domain as blocked. No SSL certificate was observed, which suggests the site operated without HTTPS encryption.

The combination of a newly created domain, use of a reputable CDN for concealment, absence of TLS, low trust scores, and the presence of a known gambling‑oriented phishing kit collectively point to an elevated risk profile. Defenders should continue to block the domain at network perimeter devices, update URL filtering and threat‑intel feeds, and monitor for any re‑registration or re‑use of the underlying IP address.