voxocas[.]com

This domain is flagged for elevated-risk brand impersonation targeting Base, a blockchain platform. Analysis indicates the site masqueraded as a cryptocurrency casino, a common tactic to exploit user trust in decentralized finance brands for credential harvesting or fraudulent transactions. The threat type aligns with blockchain-specific phishing, where attackers leverage perceived legitimacy of crypto services to deceive users into disclosing wallet credentials or transferring assets to malicious addresses.

Infrastructure analysis reveals the domain was registered through Tucows Domains Inc. on June 04, 2026, an anomalous creation date suggesting potential domain spoofing or registry manipulation. It resolved to Cloudflare IP 2606:4700:3035::ac43:b628 and employed Google Trust Services SSL certificates, a pattern observed in phishing campaigns aiming to appear legitimate. Detection metrics include 15/95 security vendor flags on VirusTotal, a Gridinsoft trust score of 0/100, and presence on one security blocklist. Technologies detected—Twitter Ads, Facebook Pixel, and Cloudflare Browser Insights—indicate an intent to amplify reach through social media advertising, a red flag for coordinated phishing distribution.

Mitigation requires immediate domain suspension via registrar abuse channels, particularly Tucows Domains Inc., to disrupt infrastructure. Users should verify blockchain service URLs against official sources, as impersonation often involves slight domain variations. Wallet providers and exchanges are advised to monitor transactions linked to this IP range and implement enhanced authentication for crypto-related logins. Security teams should prioritize blocking the domain and IP across network defenses, while educating users on recognizing fake blockchain platforms through irregular SSL issuers, mismatched registration dates, and unsolicited social media promotions.