puonax[.]com

Analysis as of July 23, 2026 indicates that the domain puonax.com is tied to a brand‑impersonation campaign targeting the X platform (identified as x.com). The site’s title, “Puonax: Most Popular Online Crypto Casino Based on Blockchain,” suggests a fraudulent crypto‑casino operation. Registration records show the domain was created on 09 Oct 2025 through NiceNIC International Group Co., Limited, and it resolves to IP 104.21.13.114, which belongs to Cloudflare Inc. (AS13335) and is geolocated in the United States. The domain uses Cloudflare’s default nameservers cullen.ns.cloudflare.com and simone.ns.cloudflare.com. No TLS certificate is presented, implying that the site was served over plain HTTP before being taken offline. Reputation services flag the domain as highly suspicious.

Gridinsoft assigns a trust score of 0/100, and the domain is listed on a single security blocklist. PhishDestroy has actively blocked the domain, and VirusTotal reports that 13 out of 95 antivirus and URL scanners flagged it as malicious. AlienVault’s Open Threat Exchange references the domain in one threat‑intelligence pulse, reinforcing the observed malicious activity. The campaign appears to employ a “Gambler Scam” phishing kit, which is commonly used to lure victims into depositing cryptocurrency under the pretense of casino winnings. The current status is offline, yet the infrastructure remains observable.

The lack of an SSL certificate, combined with the low trust score and multiple vendor detections, indicate that the domain was likely used to host fraudulent content rather than a legitimate service. Uncertainty remains regarding the volume of traffic or any victim data that may have been harvested before the takedown. Defenders should continue to block the domain at network perimeter devices, update URL filtering lists, and monitor for any residual activity originating from the associated Cloudflare IP range.