Domain security and threat intelligence

casino[.]vuahox[.]com

Threat verdict Critical 94/100 evidence score

Availability Unverified Current reachability is unverified

Risk signals

VirusTotal detections: 13/91 Spamhaus DBL: DBL_PHISH Scam type: Gambling Young domain: 21 days old

Aug 7, 2026 CDN

Evidence Summary

CRITICAL

The domain casino.vuahox.com was registered on July 23, 2026 through Fewmoretaps OU doing business as Trustname.com. Its DNS resolves to the IPv4 address 64.7.198.11, an address that currently appears on a single security blocklist. The domain has been flagged by the PhishDestroy blocking service, indicating that it is actively used in a phishing campaign targeting users who may be enticed by casino‑related offers. VirusTotal analysis shows that 13 of 91 scanned security vendors flagged the domain as malicious, providing additional corroboration of its malicious intent.

The specific detection signatures were not disclosed, but the consensus among a minority of scanners suggests the presence of phishing‑related payloads or infrastructure. No public Safe Browsing entry, Open Threat Exchange (OTX) indicator, or SSL certificate information is available in the current intelligence set, and the site’s HTTP response code, page title, or content have not been captured. Consequently, the precise phishing vector—whether it mimics a gambling platform login, a payment gateway, or another service—remains unknown. Defenders should block DNS resolution to 64.7.198.11 for any internal clients and add casino.vuahox.com to web‑filter and email‑gateway blocklists.

Continuous monitoring of the IP address for additional malicious activity is advised, as well as periodic re‑scanning with VirusTotal or similar multi‑engine services to detect any changes in detection rates. Given the recent registration date and the early detection by multiple security vendors, the risk posture of this domain is elevated. Organizations should treat any unsolicited communications referencing casino.vuahox.com as potentially malicious and educate users to avoid clicking links or providing credentials.

VirusTotal

13 det.

URLScan

Report ↗

Gridinsoft

1/100

Scamadviser

80/100

TLS Certificate

Let's Encrypt

Age

21d Very New!

Observed status

Unverified

DestroyList

Listed

Data coverage VirusTotal 13 / 91 URLQuery not checked PhishStats not checked OTX no community references CF Radar scan completed URLScan capture stored report URLScan verdict verdict unavailable DNS blocks not checked TLS valid certificate, 86d WHOIS 21d old Screenshot 4 captures · 3 sources Redirect chain not probed Gridinsoft 1/100 Scamadviser 80/100

Network Security Intelligence Registrar context

Registrar context Trustname

Stored registration data identifies Trustname / Fewmoretaps OÜ (IANA 4318) as the registrar. PhishDestroy maintains a separate registrar investigation; that material is contextual and is not an independent detection for this domain.

Trustname Investigation

Threat Response Pipeline

Discovery

Checks

Reports

Availability

9/11

Public Blocklist Status

Stored Capture

Screenshot of casino.vuahox.com — **URLScan capture 1**2026-08-07 11:45 UTC 2 / 4

View Full Size Source Report Wayback Download

TLS Certificate

Valid transport encryption · Issued by Let's Encrypt · valid for 86 days

Domain Intelligence

Domain

Server / ASN cloudflare · AS399629 BL Networks

IP Context Cloudflare shared edge origin IP hidden Edge-IP reputation is not attributed to this domain.

Registrar (base domain) Fewmoretaps OU d/b/a T…

(BY) PhishDestroy Investigation

Abuse contactabuse@trustname.com

ICANN RegistryOfficial ICANN accredited-registrars →

WHOIS LookupICANN RDAP for vuahox.com →

IP Address 64.7.198.11 CDN

Geo

Bucharest, RO

NetworkAS399629 · BL Networks

Reverse IPviewdns.info → rapiddns.io →

The origin IP is hidden behind a CDN proxy. Reverse-IP results for the edge address contain unrelated tenants; finding the origin requires passive DNS or certificate-transparency data.

Registration (base domain)vuahox.com · Created Jul 23, 2026 (21d · Very New!) — Expires Jul 23, 2027

Technical detailsDNS, SSL SANs, timestamps

First DetectedAug 7, 2026

DOM Analysisanalyzed Aug 7, 2026score 93/100

IoC Extractionscanned Aug 8, 20260 wallet · 0 Telegram IoCs

Submitted URLhttps://casino.vuahox.com/

Nameserversemerson.ns.cloudflare.comthea.ns.cloudflare.com

TLS Fingerprint

TLS Observationvalid from Aug 3, 2026scanned Aug 8, 2026

ICANN OVERSIGHT Registration: vuahox.com

Accreditation and RAA context

Registrar accreditation and DNS abuse obligations

For the registrable domain vuahox.com behind this subdomain, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.

Accreditation is a contract, not a safety certification.

RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.

Accreditation is a contract, not a safety seal. Verify ICANN fees Read RAA §3.18 PHISHDESTROY INVESTIGATIONICANN funding, contracts, and DNS abuse oversight

Accountability draft Nothing is sent automatically.

Threat Intel Cross-Reference · source references

ScamAdviser Public lookup

A public ScamAdviser lookup is available. Review its current score and warnings at the source; the existence of a lookup page is not itself a malicious verdict.

View on ScamAdviser

Live-fetched via CF worker proxy pool · cached 24h

Casino / Gambling License Verification

Unverified gambling license

This domain markets casino/gambling services. Scam casinos routinely display fake Curaçao, MGA, or Kahnawake license badges that don’t exist in the real registries. Always verify the license number against the official regulator database before depositing. If the site shows a seal but no clickable registry link — or the linked registry page doesn’t exist — treat it as fraudulent.

Curaçao eGaming (official) Malta Gaming Authority UK Gambling Commission PA Gaming Control Kahnawake Gaming Gibraltar Gambling

Report This Domain Submit evidence & help protect others

VirusTotal Analysis

13 / 91 security vendors flagged this domain

View on VT

Last analyzed 2026-08-07 13:40:31 UTC

alphaMountain.ai

BitDefender

CRDF

CyRadar

ESET

Fortinet

G-Data

Gridinsoft

Kaspersky

Lionic

Netcraft

Sophos

VIPRE

Site Performance Analysis

Google PageSpeed Insights — mobile performance audit of casino.vuahox.com · checked Aug 7, 2026

Poor

Performance

FCP

2.27s

First Contentful Paint

LCP

34.89s

Largest Contentful Paint

CLS

0.002

Cumulative Layout Shift

TBT

1861ms

Total Blocking Time

6.3s

Speed Index

Evidence & External Reports

Security Analysis

URLScan Stored capture VirusTotal 13 det. ChainPatrol ChainAbuse 2 reports URLQuery Open lookup Gridinsoft 1 trust Scamadviser 80 trust SSL Labs Stored TLS valid CF Radar Open report WOT Blacklist Checker URLVoid Sucuri SiteCheck MDN Observatory

Community Scam Report — ChainAbuse

2 reports filed for vuahox.com (1 written by a person) · category: Other Hack · source checked 2026-08-14 07:42:08 UTC

“Report of Suspected Cryptocurrency Withdrawal Scam Involving play.vuahox.com I believe I was the victim of a cryptocurrency withdrawal scam involving the website https://play.vuahox.com. I originally found the website through what appeared to be a promotional social media post using MrBeast’s name and branding, advertising a $2,500 cryptocurrency bonus for new users. The promotion directed users to visit vuahox.com and enter a promotional code to claim the bonus. I have retained a screensh”

— reported by Anonymous on Jul 26, 2026 · Source: ChainAbuse (TRM Labs) — full report and evidence there.

OSINT & Intelligence

Web-Check Full scan SOCRadar Dark web report LeakIX Leak search Shodan Censys ThreatFox Hudson Rock Sign-in search IntelX crt.sh Certs WHOIS Wayback

DNS & Network

nslookup.io DNS bgp.tools ASN/Route

SEO & Domain

SpyFu Moz DA/PA Ahrefs Backlinks Deep Analysis

Were You Affected by This Site?

If credentials were compromised, report immediately. Do not engage with recovery scammers.

If credentials, payment data, or files were exposed, report the incident immediately. Change affected passwords, revoke active sessions, and scan the device.

FBI IC3

Report internet-enabled crime in the United States

Federal tips line1-800-CALL-FBI

Europol

Find the official reporting channel for your EU country

National police directory

Action Fraud

Report fraud and cybercrime in England, Wales and Northern Ireland

Contact centre0300 123 2040

PhishDestroy listing review Not a law-enforcement report

Domain Appeal

Request a review if you own this domain and believe the listing is incorrect

Beware of recovery scammers! Recovery scammers may pose as investigators, lawyers, or tracing services. Do not pay upfront fees or disclose credentials. Learn more about recovery fraud →

Report to Your Local Authorities

Select your country to get official cybercrime contacts, or create a complaint draft →.

97-country directory

Template-based draft • optional AI wording assistance requires separate consent Review and submit it yourself

Stay Informed, Stay Safe

Monitor live threats or contest this listing if you believe it's a false positive

Live Threat Feed Appeal This Listing

HTML · IFRAME

Embed This Report

Share this threat intelligence on your website or blog

embed.html

<iframe
  src="https://phishdestroy.io/embed/domain/casino.vuahox.com"
  title="PhishDestroy threat report for casino.vuahox.com"
  width="100%" height="320"
  loading="lazy"
  referrerpolicy="no-referrer"
  sandbox="allow-same-origin allow-popups allow-popups-to-escape-sandbox"
  style="border:0;border-radius:12px;max-width:100%"
></iframe>

casino[.]vuahox[.]com

Threat Response Pipeline

Public Blocklist Status

Stored Capture