daxodis[.]com
Analyse phishing et sécurité de daxodis.com
“Games - VAVADA Online”
daxodis.com — Contenu indisponible (HTTP 502). Usurpation de l'identité de la marque : Camelot; Type d'arnaque : Brand Impersonation. Résumé des preuves: VirusTotal 11/95 (alphaMountain.ai, BitDefender, CyRadar, Forcepoint ThreatSeeker, Fortinet); PhishDestroy score 88/100. Bureau d’enregistrement: MAT BAO.
L’analyse détaillée de PhishDestroy AI reste en anglais afin de préserver le relevé forensique original.
Evidence Analysis
Analysis of the domain daxodis.com indicates a confirmed brand impersonation campaign targeting Camelot, classified as elevated risk. The domain was registered on October 8, 2025, through MAT BAO CORPORATION, a registrar historically associated with abusive registrations. Infrastructure analysis reveals resolution to the IP address 194.145.208.100, hosted in the Netherlands under AS200514 (KnownSRV Ltd.), a network frequently observed in phishing and scam operations. Nameservers eugene.ns.cloudflare.com and faye.ns.cloudflare.com suggest Cloudflare proxy usage, a common tactic to obscure hosting origins and evade takedowns. Detection metrics confirm malicious classification: 11 of 95 security vendors on VirusTotal flagged the domain as malicious, while PhishDestroy explicitly blocks it.
The domain appears on one security blocklist, and AlienVault OTX records it in a single threat intelligence pulse, indicating prior identification by the security community. Trust assessment scores from Gridinsoft and Scamadviser are 0/100 and 1/100, respectively, reinforcing the domain's high-risk profile. No SSL certificate was detected, increasing the likelihood of interception or tampering during transmission. The page title 'Games - VAVADA Online' suggests an attempt to mimic an online gaming or gambling platform, though the exact content and functionality remain unconfirmed due to the domain's current offline status.
The impersonation of Camelot, a recognized brand, aligns with the scam type identified in threat intelligence. Defenders should treat this domain as compromised infrastructure and prioritize blocking at DNS, proxy, and endpoint layers. Network administrators are advised to monitor for connections to 194.145.208.100 and review logs for interactions with the domain or associated nameservers. Given the domain's registration date and detection history, it may represent a recurring threat vector requiring ongoing vigilance.
Couverture des données13 recorded checks
Signaux de sécurité
Processus de réponse aux menaces Pipeline
Statut de la liste de blocage publique
Capture enregistrée
Informations sur les domaines
Détails techniquesDNS, SAN SSL, horodatages
ICANN OVERSIGHT
Contexte de l’accréditation et du RAA
Contexte de l’accréditation et du RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Analyse forensique
Analyse VirusTotal
Données factuelles et rapports externesIndependent lookups and source reports
Victim safety and official reportingImmediate actions and verified reporting channels
Si vous avez saisi des informations d'identification de compte, des informations personnelles ou de paiement, ou téléchargé un fichier à partir de ce domaine, agissez immédiatement. Vous trouverez ci-dessous des ressources pour vous aider à signaler l'incident et à vous protéger.
Signalez-le à vos autorités locales
Sélectionnez votre pays pour obtenir contacts officiels en matière de cybercriminalité ou créer un projet de plainte →.