gedomex[.]com

Analysis of gedomex.com, reported on July 25, 2026, shows a confirmed brand impersonation campaign targeting the cryptocurrency exchange MEXC. The domain was registered through Dominet (HK) Limited on October 25, 2025 and resolves to the Cloudflare address 188.114.96.3, located in the United States under ASN 13335. Nameservers giancarlo.ns.cloudflare.com and hadlee.ns.cloudflare.com confirm the use of Cloudflare’s infrastructure, and the site lacks an SSL certificate, exposing any traffic to potential interception.

The page title "Gedomex: Most Popular Online Crypto Casino Based on Blockchain" aligns with the declared scam type of a crypto scam and matches the Gambler Scam phishing kit, indicating the operator is leveraging a gambling narrative to lure victims. Gridinsoft assigns a trust score of 1 out of 100, and the domain appears on a single security blocklist, reflecting limited but notable detection. VirusTotal records seven detections out of ninety‑five scanning engines, providing independent confirmation of malicious activity.

The domain has been taken offline and is currently blocked by the PhishDestroy sinkhole. Risk is elevated, and defenders should treat any historical traffic to gedomex.com as suspect, block the domain and its associated IP address at perimeter defenses, and monitor for related Cloudflare‑hosted assets that may be re‑used in future campaigns. Incident responders should also update internal intelligence feeds with the registrar, creation date, and kit fingerprint to improve early‑warning capabilities for similar brand‑impersonation attempts.