baxhit[.]com

The domain baxhit.com was registered on 9 July 2025 through MAT BAO CORPORATION and currently resolves to the IPv4 address 69.5.189.54, which is assigned to AS42624 Global-Data System IT Corporation located in Switzerland. The site’s page title, “BAXHIT | Play at the best online casino based on Blockchain”, indicates a cryptocurrency‑focused gambling theme. Analysis of the hosting environment shows four of ninety‑five VirusTotal scanners reported detections, and the domain appears on one external security blocklist. It is also listed by PhishDestroy as a known malicious resource.

The infrastructure is protected by a Gridinsoft trust score of 1 out of 100, reflecting extremely low confidence in its legitimacy. No TLS certificate is presented, meaning traffic is unencrypted. The DNS configuration lists four nameservers – ns1.nameserverhub.com, ns2.nameserverhub.com, ns3.nameserverhub.com, and ns4.nameserver – suggesting the use of a generic hosting provider. The observed phishing kit is identified as “Gambler Scam”, and the overall threat classification is a crypto‑scam phishing operation.

The domain is presently taken offline, which limits immediate interaction but does not eliminate the risk of re‑activation or reuse of the same infrastructure. Defenders should continue to block the domain at perimeter filters, monitor for any resurrection of the host IP or associated nameservers, and consider adding the IP to reputation lists. Additional investigative steps include reviewing the four VirusTotal detections for specific malware families and validating the blocklist entry that flagged the domain. Until further activity is observed, the domain should be treated as high‑risk for credential harvesting and cryptocurrency fraud.