moxcas[.]com

This domain, moxcas.com, is flagged for brand impersonation targeting the online gambling sector, specifically crypto-based casinos. Analysis indicates the site mimics legitimate blockchain gambling platforms, presenting itself under the page title 'MOXCAS | Play at the best online casino based on Blockchain.' The threat type is classified as brand impersonation, a tactic commonly used to deceive users into disclosing credentials, depositing cryptocurrency, or engaging in rigged gambling activities. No specific drainer kit signatures were identified in the available data, though the infrastructure aligns with known fraudulent gambling operations. Infrastructure analysis reveals the following technical indicators: the domain was registered on March 11, 2025, through MAT BAO CORPORATION, a registrar frequently associated with high-risk domains. It resolves to the IP address 69.5.189.54, which has been linked to other suspicious gambling and phishing sites. VirusTotal detection shows 3 out of 95 security vendors flagging the domain as malicious. The domain appears on one security blocklist and was actively blocked by at least one threat intelligence feed. No Google Safe Browsing (GSB) hits were recorded at the time of analysis, though this does not preclude prior or subsequent detections. Current status indicates the domain has been taken offline, likely due to enforcement actions or infrastructure takedowns. Despite its offline state, residual risk remains elevated due to the potential for re-registration or migration to new infrastructure. Users who interacted with the domain should assume credential exposure and monitor financial transactions for unauthorized activity. Organizations are advised to block the domain and its associated IP at the network level, while end-users should verify gambling platforms through official channels before engaging. The creation date and registrar details suggest a short-lived but high-impact operation, typical of fraudulent gambling schemes.