mizofex[.]com

The domain mizofex.com was registered on November 20, 2025 through Dynadot LLC. It is currently resolved to the IP address 104.21.79.28, which belongs to AS13335 Cloudflare, Inc. and is geolocated in the United States. The authoritative nameservers are eleanor.ns.cloudflare.com and harlan.ns.cloudflare.com, and the site presents a TLS certificate issued by Google Trust Services under the WE1 root, indicating a valid HTTPS endpoint. Security telemetry shows the site is listed on three public blocklists and has been flagged by 17 of 95 antivirus engines on VirusTotal. Independent blocklist providers PhishDestroy, MetaMask, and SEAL have already blocked the domain. The Gridinsoft trust score is 1 out of 100, reinforcing the malicious classification. Analysis of the page title – “Mizofex: Most Popular Online Crypto Casino Based on Blockchain” – together with the recorded scam type of cryptocurrency suggests the operation is designed to lure victims into a crypto‑focused fraud. The infrastructure uses the publicly known “Gambler Scam” phishing kit, which is commonly employed to harvest credentials and cryptocurrency wallet information. Publicly available data does not include a detailed content scrape, so the exact user‑facing lures, credential capture fields, or additional malicious payloads cannot be confirmed at this time. Likewise, no evidence has been observed of active command‑and‑control servers or malware distribution beyond the phishing kit reference. Defenders should add mizofex.com to outbound web filtering and DNS sink‑hole lists, and enforce TLS inspection to detect any credential exfiltration attempts. Network monitoring for connections to 104.21.79.28 or to the Cloudflare edge should be instituted, and any alerts triggered by the known phishing kit patterns should be escalated. Incident response teams should also consider informing users about the fraudulent crypto casino narrative to reduce successful phishing attempts.