drakenexus[.]com

Analysis of the domain drakenexus.com indicates it was registered on September 13, 2025, through Web Commerce Communications Limited and was actively flagged as part of a crypto scam campaign. The domain resolved to the IP address 69.5.189.54, hosted under AS42624 (Global-Data System IT Corporation) in Switzerland. Infrastructure analysis reveals the use of four nameservers: ns1.nameserverhub.com, ns2.nameserverhub.com, ns3.nameserverhub.com, and ns4.nameserver. No SSL certificate was detected, increasing the risk of unencrypted data transmission.

The page title, 'Drakenexus: Most Popular Online Crypto Casino Based on Blockchain,' aligns with the classified scam type of a 'Gambler Scam,' specifically targeting users with fraudulent crypto casino offers. Detection data confirms the domain's malicious status: it appears on one security blocklist, and 13 of 95 security vendors on VirusTotal flagged it as malicious. AlienVault OTX included the domain in one threat intelligence pulse, further corroborating its association with phishing activity. Trust scores from Scamadviser and Gridinsoft both assigned a 1/100 rating, reinforcing the domain's high-risk classification.

The domain was blocked by PhishDestroy and is currently offline, though its prior activity and infrastructure remain relevant for historical threat analysis. Defenders should treat this domain as part of a broader crypto scam campaign, particularly those targeting gambling or blockchain-based financial services. No legitimate use case has been identified, and the domain's creation date, hosting provider, and detection metrics collectively support its classification as a confirmed phishing threat. Organizations are advised to maintain blocklist entries for this domain and monitor related infrastructure for potential resurgence or rebranding efforts.