mixgamb[.]com

Analysis performed on July 25, 2026 indicates that the domain mixgamb.com is associated with a crypto‑focused phishing campaign. The site was registered on December 26, 2024 through Web Commerce Communications Limited and currently resolves to the IP address 188.114.96.3, which belongs to AS13335 Cloudflare, Inc. in the United States. The domain is hosted behind Cloudflare and uses the nameservers isaac.ns.cloudflare.com and raquel.ns.cloudflare.com. No TLS certificate is present, meaning the connection is unencrypted.

The page title reported by the crawler is “Mixgamb: Most Popular Online Crypto Casino Based on Blockchain,” confirming that the attacker is positioning the site as a cryptocurrency casino. Intelligence links the page to the publicly known “Gambler Scam” phishing kit, and the domain has been blocked by the PhishDestroy service. Reputation metrics are extremely low, with a Gridinsoft trust score of 1 out of 100 and a presence on one security blocklist. VirusTotal analysis shows that two of ninety‑five scanning engines flagged the domain, providing additional confirmation of malicious intent.

The combination of a newly created domain, lack of SSL, low trust score, and detection by multiple security products suggests an elevated risk to users who may be lured into credential or wallet theft. Defenders should add mixgamb.com and its resolving IP 188.114.96.3 to deny‑list rules, ensure that web filtering solutions reference the observed blocklist entry, and monitor for any related indicators such as the Gambler Scam kit artifacts. Because the site is currently offline, ongoing surveillance is advised to detect any re‑hosting attempts, especially on Cloudflare infrastructure, and to update detection signatures accordingly.