daxonis.com

Analysis of the domain daxonis.com shows a short-lived infrastructure supporting a brand impersonation campaign targeting Camelot. The site was registered on October 06, 2025 through MAT BAO CORPORATION and is hosted on IP 176.97.79.105, which belongs to AS58061 Scalaxy B.V. in the Netherlands. DNS resolution uses Cloudflare name servers eugene.ns.cloudflare.com and faye.ns.cloudflare.com, indicating the use of a reputable DNS provider despite the malicious intent. The web server presented no SSL certificate, leaving traffic unencrypted and exposing users to man-in-the-middle risks. The only visible page title, "Games - VAVADA Online," does not reference the Camelot brand, suggesting the page content may have been altered or removed before takedown.

Scamadviser assigned a trust score of 32 out of 100, while Gridinsoft reported a score of 0, reflecting a high likelihood of abuse. VirusTotal scans recorded four detections out of ninety‑five AV engines, confirming that multiple security products flagged the domain as malicious. The domain appears on a single public blocklist, PhishDestroy, which has already taken the site offline. Current status is offline, and access attempts are blocked by PhishDestroy.

Uncertainties remain regarding the exact phishing kit or page layout, as no visual evidence is available. Defenders should continue to block daxonis.com at perimeter firewalls and DNS filters, monitor for any re‑registration attempts, and correlate inbound traffic logs for connections to 176.97.79.105. Additional scrutiny of related Cloudflare name servers is advisable to detect potential sibling domains. Organizations using Camelot branding should educate users about unsolicited communications that reference the brand, and incident response teams should treat any residual login or credential submissions associated with this domain as compromised.