donemex[.]com

donemex.com entered the PhishDestroy evidence set on Jan 24, 2026. The stored content classification is crypto scam. The assembled evidence scores 73/100 (high).

Two independent sources are positive: VirusTotal and URLScan. VirusTotal recorded 6 detections among 95 engines: alphaMountain.ai, CyRadar, Forcepoint ThreatSeeker, Gridinsoft, Kaspersky, SOCRadar on Feb 23, 2026 at 07:22 UTC. URLScan returned a malicious verdict with score 100 on Mar 27, 2026 at 12:09 UTC. The evidence is not unanimous. The external blocklist snapshot contained no matches on Aug 7, 2026 at 18:20 UTC. URLQuery recorded no positive detection. Google Safe Browsing returned no flag on Mar 3, 2026 at 04:14 UTC.

HTTP 502 was recorded on Aug 7, 2026 at 01:14 UTC; content was unavailable. Registration records for the domain list Hello Internet Corp as the registrar. At collection time, the hostname resolved to 2606:4700:3031::6815:2976 on AS13335 (CLOUDFLARENET - Cloudflare, Inc., US). The associated network metadata labels the endpoint as AS13335 Cloudflare, Inc. in San Francisco, US. The stored server header is cloudflare. Captured page title: “Donemex: Elon Musk’s Official Crypto Casino Powered by Blockchain”. DOM analysis completed on Apr 23, 2026 at 03:23 UTC; stored DOM score 15/100. The evidence archive retains 2 visual captures from PhishDestroy and URLScan. IoC extraction completed on Aug 2, 2026 at 04:15 UTC; stored 0 format-validated wallet addresses and 0 Telegram indicators.

No target brand has been confirmed from stored page content; hostname wording alone is not treated as brand evidence. Taken together, the page content and independent findings support classifying this hostname as crypto scam.