ayxsport-games[.]com

This domain, ayxsport-games.com, operates as a brand impersonation phishing site targeting users of the legitimate AYX Sports platform. The page title, rendered in Chinese as "爱游戏ayx体育官方网站_aYXSPORtS," directly references the AYX brand, suggesting an attempt to deceive visitors into believing they are accessing an official sports betting or gaming portal. Analysis indicates the site likely harvests login credentials or financial details under the guise of a trusted service, a common tactic in credential theft and fraud campaigns. The use of a Let's Encrypt SSL certificate further lends a false sense of legitimacy to unsuspecting users. Evidence supporting the malicious classification includes detection by 17 out of 95 security vendors on VirusTotal, a Gridinsoft trust score of 0/100, and presence on one security blocklist (PhishDestroy). The domain was registered on February 25, 2026, through GoDaddy.com, LLC, and resolves to the IP address 201.5.234.76. Detected technologies include Nginx as the web server, jQuery, and jQuery Migrate, alongside HTTP Strict Transport Security (HSTS), which may be employed to enhance the site's perceived authenticity. The domain is currently offline, but its infrastructure remains a documented indicator of compromise. Users who visited ayxsport-games.com should immediately revoke any credentials entered on the site, particularly if reused across other platforms. Monitor financial accounts for unauthorized transactions and enable multi-factor authentication where available. Security teams should add the domain, its resolving IP (201.5.234.76), and associated SSL certificate (Let's Encrypt) to network blocklists to prevent further exposure. If personal or financial data was submitted, consider reporting the incident to relevant authorities and credit monitoring services to mitigate potential identity theft or fraud.