dexowin[.]bet

This domain, dexowin.bet, was registered on 14 Oct 2025 through Web Commerce Communications Limited and currently resolves to 104.21.90.183, an address owned by Cloudflare (AS13335) located in the United States. The site is listed on a single security blocklist and is actively blocked by the PhishDestroy feed. Reputation services assign a trust score of 1 / 100 both in Gridinsoft and Scamadviser, indicating an extremely low credibility rating. VirusTotal analysis shows that 14 of 93 scanning engines flagged the domain, reinforcing the malicious classification.

No TLS certificate is presented, meaning the site is served over plain HTTP, which further reduces trustworthiness. The page title returned from the live host reads “Dexowin: Most Popular Online Crypto Casino Based on Blockchain,” and the observed phishing kit is identified as the Gambler Scam template, a known instrument for crypto‑related fraud. The domain’s current status is offline, but historical evidence suggests it was used for a crypto‑casino phishing campaign.

Defenders should continue to block the domain at perimeter filters, monitor the associated IP address for any re‑use, and add the domain to internal blacklists. Because the infrastructure relies on Cloudflare’s shared hosting, any future sub‑domains created by the same registrant may inherit the same risk profile, so threat‑intel feeds should be updated to include the registrar and nameserver pair (jakub.ns.cloudflare.com, kelly.ns.cloudflare.com). Ongoing vigilance is recommended, especially for organizations that allow cryptocurrency transactions, to prevent credential harvesting or fund diversion attempts originating from this infrastructure.