kcexx538[.]com

PhishDestroy identifies kcexx538.com as an active crypto drainer posing as the KCEX exchange platform. This domain employs deceptive tactics to trick users into connecting cryptocurrency wallets under the guise of legitimate trading, with malicious JavaScript likely harvesting private keys or facilitating unauthorized transactions. The site’s interface mirrors legitimate exchange branding, but its backend infrastructure is designed to siphon digital assets directly from victim wallets.

This domain exhibits multiple red flags confirmed by forensic analysis. VirusTotal flags the site with a 6/95 detection score, indicating partial recognition by security vendors of its malicious nature. Registered through NameSilo, LLC, kcexx538.com resolves to IP address 188.114.96.3 and was created suspiciously on April 01, 2026—an anomalous timestamp suggesting potential bulk registration activity. Google Safe Browsing classifies the domain under SOCIAL_ENGINEERING, while InversionDNS has already blocked it. Additionally, the domain leverages a Let's Encrypt SSL certificate to appear legitimate, though this does not guarantee safety.

As of the latest assessment, kcexx538.com remains active despite active blocklists and security vendor detections. Users should treat this domain with extreme caution, avoid interaction, and verify any similar sites using PhishDestroy’s real-time threat intelligence platform. The combination of low VT score, recent domain creation, and confirmed malicious classification underscores a high-risk profile. Immediate avoidance and reporting are strongly advised to prevent financial loss.