app[.]koazox[.]com

The domain app.koazox.com has been identified as a phishing resource engaged in brand impersonation, specifically targeting users of a crypto casino platform. Analysis indicates the domain masquerades as a legitimate blockchain-based gambling service, as evidenced by its page title, 'Koazox: Most Popular Online Crypto Casino Based on Blockchain.' The domain is currently offline, though prior activity suggests it was operational for malicious purposes. Infrastructure analysis reveals the domain was registered on May 12, 2026, through Fewmoretaps OU, operating under the registrar Trustname.com. It resolves to the IP address 188.114.97.3 and employs a Let's Encrypt SSL certificate, which, while common among legitimate services, is frequently abused in phishing campaigns. Security vendor detections on VirusTotal report 17 of 95 engines flagging the domain as malicious, and it appears on one security blocklist. The domain's creation date, set in the future, further suggests an attempt to evade temporal-based detection mechanisms. The current offline status of app.koazox.com does not mitigate its associated risks, as infrastructure may be reactivated or repurposed. Organizations and users are advised to block the domain and its resolving IP at the network level. Security teams should monitor for related domains registered through Fewmoretaps OU or resolving to 188.114.97.3, as these may indicate further malicious activity. End-users should verify the authenticity of crypto gambling platforms through official channels and avoid interacting with unsolicited links or domains mimicking known brands.