hemowex[.]com

Analysis of hemowex.com, taken offline as of July 24 2026, shows a short‑lived domain created on 4 August 2025 and hosted behind Cloudflare (ASN 13335) with the public address 188.114.96.3 located in the United States. The domain resolves to Cloudflare’s edge network using the authoritative name servers irena.ns.cloudflare.com and piotr.ns.cloudflare.com, indicating that the operators leveraged a reputable CDN to conceal the origin of the service. No TLS certificate is presented, meaning the site was served over HTTP only, a characteristic often observed in low‑quality scam pages. The page title returned by the HTTP response reads “HEMOWEX | Play at the best online casino based on Blockchain”, which aligns with the declared scam type of a crypto‑focused gambling operation. The site explicitly impersonates the charitable foundation brand, as indicated by the “Brand target: foundation” field, and it is associated with the publicly known Gambler Scam phishing kit.

Two of ninety‑five antivirus engines on VirusTotal flagged the domain, confirming that at least a minority of security vendors consider it malicious. The domain appears on a single blocklist, PhishDestroy, and the Gridinsoft trust score of 1 / 100 further reflects an extremely low reputation. Registration was performed through Key‑Systems GmbH, a registrar that does not inherently guarantee legitimacy. The combination of a recent registration date, lack of HTTPS, low trust score, and detection by multiple vendors supports the conclusion that hemowex.com was used for a brand‑impersonation crypto gambling scam.

Uncertainties remain regarding the exact content that was served before the takedown, as the site is currently offline and no additional forensic snapshots are available. Defenders should continue to block the IP address 188.114.96.3 and the associated Cloudflare ASN, add hemowex.