MALICIOUS — CRITICAL
app[.]nuotox[.]com
Analysis of the domain app.nuotox.com indicates active phishing infrastructure targeting users of online cryptocurrency gambling platforms.
- VirusTotal
- 17/91
- Blocklists
- No stored match
- Ketersediaan
- Terselubung · dapat dijangkau · HTTP 200
Do not enter credentials, seed phrases, payment details, or personal information on this domain.
Notification and current-status evidence
The sent-report ledger records the first outgoing report at .
The recorded recipient is abuse@trustname.com.
The latest stored availability evidence still shows the domain reachable; 1 month has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
Jump to section
app.nuotox.com — Terselubung · dapat dijangkau (HTTP 200). Peniruan identitas merek: Cryptoscam; Jenis penipuan: Generic Phishing. Ringkasan bukti: VirusTotal 17/91 (ADMINUSLabs, alphaMountain.ai, BitDefender, Chong Lua Dao, CRDF); URLQuery 6 alerts; URLScan malicious verdict; Spamhaus DBL_PHISH; cloaking observed; PhishDestroy score 100/100. Registrar: Fewmoretaps OU d/b/a T….
Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.
Evidence Analysis
Analysis of the domain app.nuotox.com indicates active phishing infrastructure targeting users of online cryptocurrency gambling platforms. The domain was registered on May 25, 2026, through Fewmoretaps OU d/b/a Trustname.com, a registrar frequently associated with high-risk domains. Infrastructure analysis reveals the domain resolves to IP address 172.67.176.193, hosted on AS399629 (BL Networks) in Romania, with Cloudflare nameservers (garret.ns.cloudflare.com and susan.ns.cloudflare.com) providing DNS resolution. The site presents a page title of 'Nuotox: Most Popular Online Crypto Casino Based on Blockchain,' suggesting an attempt to impersonate a blockchain-based gambling service, though no legitimate brand affiliation is confirmed in available data.
Security vendor detections include 14 of 91 engines on VirusTotal flagging the domain, while PhishDestroy has explicitly blocked it. The domain appears on one additional security blocklist, reinforcing its classification as malicious. The presence of the 'Gambler Scam' phishing kit further supports the assessment of fraudulent intent, though specific kit artifacts remain unconfirmed without deeper forensic analysis. The domain maintains an active SSL certificate issued by Let's Encrypt (identifier YE1), and returns an HTTP 200 status, indicating operational hosting.
Defenders should prioritize blocking the domain and its associated IP (172.67.176.193) at network and endpoint levels. Monitoring for related domains registered through Fewmoretaps OU or resolving to the same ASN may identify additional threats. While the page title suggests a crypto casino theme, the exact content and functionality of the site have not been analyzed; further investigation is recommended to determine payload delivery mechanisms or credential harvesting methods. Given the combination of detection counts, registrar reputation, and phishing kit attribution, this domain poses a high risk to users.
Cakupan data12 recorded checks
Intelijen Keamanan Jaringan Registrar context
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| DNS4EU | go.nuotox.com |
malicious | Sinkholed |
| Hagezi Threat Feed | go.nuotox.com |
malicious | Sinkholed |
| OpenDNS | go.nuotox.com |
phishing | Phishing Block |
| OpenDNS | app.nuotox.com |
phishing | Phishing Block |
| DNS4EU | app.nuotox.com |
malicious | Sinkholed |
| Hagezi Threat Feed | app.nuotox.com |
malicious | Sinkholed |
Alur Tanggapan Ancaman Pipeline
Status Daftar Blokir Publik
Tangkapan tersimpan
Intelijen Domain
Rincian teknisDNS, SAN SSL, cap waktu
ICANN OVERSIGHT
Registration: nuotox.com
Akreditasi dan konteks RAA
Akreditasi dan konteks RAA
Registrar accreditation and DNS abuse obligations
For the registrable domain nuotox.com behind this subdomain, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Analisis VirusTotal
Bukti & Laporan EksternalIndependent lookups and source reports
PD-20260624-017EE6 Recipient: abuse@trustname.com Victim safety and official reportingImmediate actions and verified reporting channels
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.