nemexbet[.]top

The domain nemexbet.top was observed as an offline crypto gambling phishing site. Registration data shows the domain was created on May 24, 2025 through Web Commerce Communications Limited, and it is served by four nameservers (ns1.nameserverhub.com, ns2.nameserverhub.com, ns3.nameserverhub.com, ns4.nameserverhub). Infrastructure analysis reveals that the domain resolves to IP address 69.5.189.58, which is allocated to AS42624 Global-Data System IT Corporation and geolocated in Switzerland (CH). No TLS certificate is present, indicating the site operated over plain HTTP only.

The page title returned by the server is "nemexbet.top", matching the domain name. Reputation services flag the domain as highly suspicious: Gridinsoft assigns a trust score of 1 out of 100, PhishDestroy has actively blocked the URL, and the domain appears on one public blocklist. VirusTotal records indicate that four of ninety‑five scanned security vendors flagged the domain, reinforcing the malicious classification. AlienVault OTX lists the domain in a single threat‑intel pulse, further corroborating its involvement in phishing campaigns.

The primary uncertainty is the current activity level; the domain is reported as offline, and no additional payload or credential‑harvesting details have been publicly disclosed. Defenders should continue to block any resolution of nemexbet.top, monitor the associated IP range for related activity, and consider adding the domain and its IP to internal deny lists. Ongoing vigilance is recommended, especially for users interacting with crypto gambling platforms, to prevent credential compromise from similar phishing infrastructure.