kemwex[.]com

The domain kemwex.com was registered on October 03, 2025 through Dominet (HK) Limited and consequently points to the Cloudflare IP address 172.67.218.249, which is associated with AS13335 Cloudflare, Inc. in the United States. The authoritative nameservers are chuck.ns.cloudflare.com and colette.ns.cloudflare.com, indicating the use of Cloudflare’s DNS service. No SSL certificate is presented for the site, meaning traffic would be unencrypted if the site were reachable. The page title observed during analysis reads "Kemwex: Most Popular Online Crypto Casino Based on Blockchain," aligning with the listed scam type of a crypto scam that mimics an online casino platform.

VirusTotal scans have recorded nine detections out of ninety‑five security vendors, confirming that multiple anti‑malware engines flag the domain as malicious. The domain appears on one external blocklist and is actively blocked by PhishDestroy, reinforcing its classification as a phishing infrastructure component. Gridinsoft assigned a trust score of 1 out of 100, indicating an extremely low reputation.

The risk level is elevated, yet the current operational status is offline, suggesting the site has been taken down or is temporarily unavailable. Defenders should continue to block kemwex.com at network perimeter and endpoint layers, monitor its DNS records for any re‑activation, and incorporate the observed indicators—IP address, nameservers, registration details, and detection counts—into threat intel feeds. Ongoing vigilance is recommended because the underlying infrastructure (Cloudflare hosting and the registrar) is reusable for future malicious deployments, and the lack of SSL does not preclude the adversary from re‑enabling encryption if the site returns online.