daxopen-app[.]com

Analysis of daxopen-app.com indicates a high-risk phishing domain targeting users through a site titled 'DaxOpen.' The domain was registered on August 21, 2025, via GoDaddy.com, LLC, and remains active as of July 13, 2026. It resolves to the IP address 72.167.222.195 and holds a trust score of 0/100, with no legitimate indicators identified. The domain appears on three security blocklists (PhishDestroy, OISD, BLP-Malware) and is referenced in 23 threat intelligence pulses on AlienVault OTX. While 4 of 95 security vendors on VirusTotal flag the domain, the specific nature of the phishing content remains unconfirmed beyond the page title 'DaxOpen.' The SSL certificate is issued by Let's Encrypt, which is common for both legitimate and malicious sites and does not mitigate risk. Defenders should treat this domain as malicious based on its registration age, blocklist presence, and low trust score. Network-level blocking is recommended, along with monitoring for connections to the resolving IP (72.167.222.195). Further investigation into associated infrastructure (e.g., hosting provider, ASN) may reveal additional compromised or malicious domains. No brand impersonation or scam category is confirmed beyond the page title, so defenders should assume generic credential harvesting or fraud until additional evidence is available.