buxgamg[.]com

This domain, buxgamg.com, is flagged as an active brand impersonation threat targeting Base, a well-known blockchain platform. Analysis of the page title, 'Buxgamg: Most Popular Online Crypto Casino Based on Blockchain,' reveals an attempt to deceive users into believing the site is affiliated with Base, leveraging its reputation to promote fraudulent gambling activities. The presence of a Gambler Scam phishing kit further confirms the domain's malicious intent, designed to exploit users through fake crypto casino offerings. Infrastructure analysis reveals concrete technical indicators of compromise. The domain was registered on May 26, 2026, through PDR Ltd. d/b/a PublicDomainRegistry.com, a registrar frequently associated with high-risk domains. It resolves to the IP address 172.67.165.44, which is proxied through Cloudflare, a common tactic to obscure the true origin of malicious traffic. VirusTotal detection shows 18 out of 95 security vendors flagging the domain as malicious. The domain appears on one security blocklist and is currently blocked by PhishDestroy. The SSL certificate is issued by Let's Encrypt, which, while legitimate, is often exploited by threat actors to lend a false sense of security. As of the latest assessment, buxgamg.com remains active, posing an elevated risk to users, particularly those within the cryptocurrency and blockchain communities. The domain's infrastructure, combined with its use of brand impersonation and a known phishing kit, indicates a well-coordinated effort to defraud victims. Users are strongly advised to avoid interacting with the domain and to verify the authenticity of any blockchain or crypto-related platforms through official channels. Organizations should consider implementing network-level blocks on the domain and its associated IP address to mitigate further exposure. Given the domain's recent creation and active status, continued monitoring is recommended to track any shifts in its infrastructure or tactics.