haogix[.]com

This domain, haogix.com, is actively engaged in brand impersonation targeting online crypto gambling platforms. Analysis indicates the site mimics legitimate blockchain-based casinos, presenting itself under the title 'Haogix: Most Popular Online Crypto Casino Based on Blockchain.' The threat type is classified as brand impersonation, with no direct evidence of a crypto drainer kit or fake login portal at this stage. However, the domain’s intent to deceive users into engaging with fraudulent gambling services remains a significant risk. Infrastructure analysis reveals the following technical indicators: the domain resolves to the IP address 188.114.96.3 and was registered on April 13, 2026, through GMO Internet Group, Inc. d/b/a Onamae.com. Detection metrics show 12 out of 95 security vendors on VirusTotal flagging the domain as malicious. Additionally, the domain appears on one security blocklist, while Google Safe Browsing (GSB) status remains unconfirmed. The elevated detection count and blocklist inclusion underscore the domain’s suspicious nature. Current status indicates the domain remains active, with no evidence of takedown or mitigation efforts. Users are advised to exercise extreme caution, as interaction may lead to financial loss or exposure to further malicious activity. Organizations should consider implementing network-level blocks for the domain and associated IP address. Remaining risk is classified as elevated due to the domain’s persistent activity and targeted impersonation of high-value crypto gambling brands.