frovix[.]com

Analysis of the domain frovix.com indicates it was associated with a crypto-based gambling phishing campaign. The domain was registered on October 6, 2025, through Dominet (HK) Limited, a registrar frequently observed in fraudulent infrastructure. Infrastructure analysis reveals the domain resolved to the IP address 104.21.95.67, hosted on Cloudflare's network (AS13335), a common configuration for phishing sites seeking to obscure their origin and evade takedowns. Nameservers chase.ns.cloudflare.com and dayana.ns.cloudflare.com further confirm Cloudflare's role in the domain's DNS resolution.

The domain was flagged by one security blocklist and detected by 9 of 95 security vendors on VirusTotal, suggesting moderate but not universal recognition as malicious. Trust scores from Scamadviser and Gridinsoft both assigned a rating of 1 out of 100, reinforcing its classification as high-risk. The page title, 'Frovix: Most Popular Online Crypto Casino Based on Blockchain,' aligns with the identified 'Gambler Scam' phishing kit, indicating the site was designed to deceive users into engaging with fraudulent gambling services under the guise of a blockchain-based platform. No SSL certificate was present, which is atypical for legitimate financial or gambling sites and further undermines the domain's credibility.

As of the report date, frovix.com has been taken offline, likely following detection and remediation efforts. Defenders should treat any residual references to this domain as malicious and prioritize blocking both the domain and its resolved IP address within security controls. While the exact content and functionality of the site remain unanalyzed, the available evidence—including registrar, hosting provider, detection counts, and trust scores—supports its classification as a crypto scam.