yoxwin[.]space

This domain is flagged for brand impersonation targeting a crypto casino gambling platform, presenting an elevated risk to users. Analysis indicates the domain mimics legitimate blockchain-based gambling services, potentially luring victims into fraudulent transactions or credential compromise under the guise of a trusted brand. The threat type is classified as brand impersonation, distinct from generic phishing or credential theft, due to its focus on replicating a specific crypto casino's identity and services. Infrastructure analysis reveals the domain yoxwin.space was registered on October 05, 2025, through NameCheap, Inc., a registrar frequently associated with malicious or high-risk domains. It resolves to the IP address 188.114.97.3, hosted under AS13335 (Cloudflare, Inc.), a network commonly leveraged to obfuscate origins and evade detection. The domain lacks an SSL certificate, further reducing its legitimacy. Security vendor detections on VirusTotal report 13 out of 95 engines flagging the domain as malicious, while it appears on one additional security blocklist. The page title, 'Yoxwin: Most Popular Online Crypto Casino Based on Blockchain,' explicitly aligns with the impersonated brand, reinforcing the intent to deceive users seeking gambling services. Mitigation steps for this brand impersonation threat include immediate blocking of the domain and associated IP address (188.114.97.3) at the network perimeter. Organizations should update endpoint protection rules to detect and prevent access to domains registered through NameCheap, Inc., with recent creation dates and no SSL certificates. Users should be educated to verify domain authenticity by cross-referencing official brand communications and avoiding engagement with unsolicited gambling or crypto-related offers. Monitoring for similar domains registered under the same registrar or resolving to the same IP range is recommended to preempt further impersonation attempts.