daotexx[.]com

On July 25, 2026, the domain daotexx.com was observed as an offline phishing infrastructure targeting the brand x.com. The site presented itself as a cryptocurrency casino, as indicated by the page title “Daotexx: Most Popular Online Crypto Casino Based on Blockchain”. Registration data shows the domain was created on August 30, 2025 through NiceNIC International Group Co., Limited and resolves to IP address 188.114.97.3, which belongs to AS13335 Cloudflare, Inc. located in the United States. The domain is listed on one security blocklist and is currently blocked by PhishDestroy.

VirusTotal scans flagged the domain by 11 of 95 security vendors, demonstrating a moderate detection rate. Gridinsoft assigned a trust score of 1 out of 100, and Scamadviser gave an identical score, indicating extremely low credibility. The site employed the publicly available “Gambler Scam” phishing kit, consistent with the crypto‑scam narrative. No SSL certificate was observed, which further reduces trustworthiness and may impede encrypted communication.

The domain appears in a single AlienVault OTX pulse, providing additional corroboration of malicious activity. At present, no live HTTP response was captured, so the exact content served when the site was active remains unknown. Defenders should continue to block daotexx.com at DNS and network layers, monitor for any re‑hosting attempts on alternative IPs, and inspect outbound traffic for connections to Cloudflare‑served addresses that could be leveraged by the actor. Because the infrastructure is presently offline, threat actors may attempt to resurrect the domain or replicate the kit on new domains; continuous threat‑intel feeds and automated URL scanning are recommended to detect any resurgence promptly.