demawex[.]com

Analysis of demawex.com confirms its classification as a crypto scam domain targeting online gambling users. The domain was registered on October 3, 2025, through Dominet (HK) Limited, a registrar frequently associated with fraudulent infrastructure. As of July 23, 2026, the site is offline, though it previously resolved to 188.114.96.3, a Cloudflare IP (AS13335) commonly used to mask hosting origins. No SSL certificate was present, increasing susceptibility to interception and reducing user trust. The page title, 'Demawex: Most Popular Online Crypto Casino Based on Blockchain,' directly aligns with the identified 'Gambler Scam' phishing kit, suggesting an attempt to lure victims with promises of blockchain-based gambling.

Security vendor assessments reinforce the malicious classification. Scamadviser assigned a trust score of 1/100, while Gridinsoft rated it 0/100. Thirteen of 95 security vendors on VirusTotal flagged the domain as malicious, though the absence of additional context limits granular threat attribution. The domain appears on one security blocklist, and PhishDestroy has explicitly blocked it. Nameservers (burt.ns.cloudflare.com and sierra.ns.cloudflare.com) further link the infrastructure to Cloudflare, a pattern observed in phishing campaigns leveraging CDN services to evade takedowns.

Defenders should treat demawex.com as a confirmed crypto scam. While the domain is currently offline, historical resolution to 188.114.96.3 and registrar details provide pivot points for further investigation. Network-level blocking of the IP and associated Cloudflare nameservers is recommended for organizations seeking to preempt resurgence. Given the domain's low trust scores and alignment with known gambling scam kits, users encountering redirects or residual links should be advised to avoid engagement.