godemex[.]com

Analysis of the domain godemex.com, observed on July 25, 2026, indicates that it is associated with a crypto‑focused brand impersonation campaign targeting the SEI brand. The domain was registered on December 22, 2025 through MAT BAO CORPORATION and is served by Cloudflare nameservers aryanna.ns.cloudflare.com and sergi.ns.cloudflare.com. DNS resolution points to IP address 188.114.97.3, which belongs to AS13335 Cloudflare, Inc. and is geolocated in the United States. No SSL certificate was presented for the site, suggesting that the service was delivered over plain HTTP or that TLS was not configured at the time of observation.

The page title returned by the server reads "Godemex: Elon Musk’s Official Crypto Casino Powered by Blockchain," which aligns with the declared scam type of a crypto scam and matches the known phishing kit identified as a Gambler Scam. VirusTotal scanned the domain and recorded detections from four of ninety‑three security vendors, indicating that multiple anti‑malware products flagged the site as malicious. Additional intelligence sources corroborate the malicious nature: the domain appears on a single security blocklist, has been blocked by the PhishDestroy service, and is referenced in three AlienVault OTX threat‑intel pulses. The Gridinsoft trust score of 0 out of 100 further reflects a lack of trustworthiness.

The domain’s current status is offline, limiting immediate interaction, but the infrastructure details remain relevant for threat‑hunting and attribution. Defenders should continue to block the IP 188.114.97.3 and associated Cloudflare edge nodes, monitor for any re‑registration of the domain or similar naming patterns, and incorporate the observed indicators—such as the registrar, nameservers, page title, and detection counts—into detection rules and threat‑intel feeds.