daxodis[.]com

Analysis of the domain daxodis.com indicates a confirmed brand impersonation campaign targeting Camelot, classified as elevated risk. The domain was registered on October 8, 2025, through MAT BAO CORPORATION, a registrar historically associated with abusive registrations. Infrastructure analysis reveals resolution to the IP address 194.145.208.100, hosted in the Netherlands under AS200514 (KnownSRV Ltd.), a network frequently observed in phishing and scam operations. Nameservers eugene.ns.cloudflare.com and faye.ns.cloudflare.com suggest Cloudflare proxy usage, a common tactic to obscure hosting origins and evade takedowns. Detection metrics confirm malicious classification: 11 of 95 security vendors on VirusTotal flagged the domain as malicious, while PhishDestroy explicitly blocks it.

The domain appears on one security blocklist, and AlienVault OTX records it in a single threat intelligence pulse, indicating prior identification by the security community. Trust assessment scores from Gridinsoft and Scamadviser are 0/100 and 1/100, respectively, reinforcing the domain's high-risk profile. No SSL certificate was detected, increasing the likelihood of interception or tampering during transmission. The page title 'Games - VAVADA Online' suggests an attempt to mimic an online gaming or gambling platform, though the exact content and functionality remain unconfirmed due to the domain's current offline status.

The impersonation of Camelot, a recognized brand, aligns with the scam type identified in threat intelligence. Defenders should treat this domain as compromised infrastructure and prioritize blocking at DNS, proxy, and endpoint layers. Network administrators are advised to monitor for connections to 194.145.208.100 and review logs for interactions with the domain or associated nameservers. Given the domain's registration date and detection history, it may represent a recurring threat vector requiring ongoing vigilance.