moadax[.]com

The domain moadax.com has been identified as a brand impersonation threat specifically targeting X.com, a well-known social media platform. This domain falsely presents itself as a crypto casino, leveraging blockchain-themed branding to deceive users into engaging with malicious or fraudulent services. Current status indicates the domain is offline, though prior activity suggests it was actively used for deceptive purposes. Analysis of moadax.com reveals multiple technical indicators of compromise. The domain was created on February 21, 2026, and registered through NiceNIC International Group Co., Limited. It resolves to the IP address 104.21.22.85, hosted on AS13335 Cloudflare, Inc., a common infrastructure choice for malicious actors due to its anonymity and resilience. The domain appears on one security blocklist and is flagged by 18 of 95 security vendors on VirusTotal, indicating a consensus on its suspicious nature. Notably, the domain lacks an SSL certificate, further reducing its legitimacy and increasing exposure to interception risks. Given the elevated risk level and confirmed brand impersonation, users and organizations are advised to treat moadax.com as a high-threat domain. Immediate actions include blocking the domain and associated IP at the network perimeter, updating endpoint protection rules to flag any attempts to access it, and monitoring for related phishing campaigns. Security teams should also investigate logs for prior interactions with this domain or its IP to assess potential compromise. Users should be educated on recognizing brand impersonation tactics, particularly those involving crypto-related services, to prevent financial or credential loss.