tredix[.]cc

Analysis indicates that tredix.cc was registered on September 12 2025 through NiceNIC International Group Co., Limited and points to the Cloudflare address 188.114.97.3 (AS13335, United States). The site’s page title advertises "Tredix: Most Popular Online Crypto Casino Based on Blockchain," aligning with the observed scam type of a crypto‑casino phishing campaign. The domain has been taken offline, and no TLS certificate was observed, meaning connections would have been unencrypted if the site were reachable. Defensive feeds show the domain is blocked by PhishDestroy and appears on one additional security blocklist.

VirusTotal scans recorded 15 detections out of 95 participating engines, reinforcing the malicious classification. Gridinsoft assigned a trust score of 1 / 100, the lowest possible rating, further confirming the high risk. The hosting infrastructure relies on Cloudflare’s austin.ns.cloudflare.com and stevie.ns.cloudflare.com name servers, a common pattern for many malicious actors that leverage the service’s CDN and obfuscation capabilities. The phishing kit identified as "Gambler Scam" suggests a reusable template targeting cryptocurrency gambling platforms.

While the site is currently offline, the underlying infrastructure—Cloudflare‑hosted IP address, low trust score, and multiple vendor detections—remains a potential vector for future re‑hosting. Defenders should proactively block the domain and the associated IP address at perimeter and DNS filters, monitor for re‑appearance of the same nameservers or IP range, and add the indicator set to threat‑intel platforms. Continuous review of VirusTotal and other sandbox feeds for any resurgence of the Gambler Scam kit is recommended to catch repurposed campaigns promptly.