gesodex[.]com

gesodex.com was registered on October 29 2025 through Dominet (HK) Limited and is hosted on Cloudflare’s network (AS13335). The domain resolves to the IPv4 address 188.114.97.3, which is associated with a US‑based Cloudflare edge node. No TLS certificate is presented, indicating the site was served over plain HTTP at the time of capture. The page title retrieved from the site reads “Gesodex: Most Popular Online Crypto Casino Based on Blockchain,” and the underlying phishing kit is identified as the “Gambler Scam” package, a known cryptocurrency‑themed lure.

Security‑vendor scoring reflects a Gridinsoft trust score of 0 / 100, and nine out of ninety‑five VirusTotal scanners flagged the domain as malicious. The domain appears on a single public blocklist and has been taken down by the PhishDestroy takedown service, with its current status listed as offline. The lack of a valid SSL certificate, combined with the low trust score and the presence of a known gambling‑oriented phishing kit, strongly suggests a crypto‑casino impersonation campaign targeting users seeking blockchain‑based gambling services.

At present, the specific content of the landing page, credential‑capture mechanisms, or any redirected URLs have not been publicly disclosed, leaving the exact victim‑interaction flow uncertain. Defenders should continue to block the domain at DNS and proxy layers, monitor for any resurgence of the IP address or associated Cloudflare edge nodes, and incorporate the indicator set (domain, IP, nameservers coco.ns.cloudflare.com and dean.ns.cloudflare.com) into threat‑intel feeds. Ongoing vigilance is recommended because the underlying kit can be repurposed to target other crypto‑related brands, and the domain’s recent creation date indicates a short‑lived but potentially repeatable campaign vector.