kawsmex[.]com

Analysis of the domain kawsmex.com, which was taken offline as of the report date July 24, 2026, indicates a confirmed cryptocurrency‑focused scam that leverages brand impersonation of the MEXC exchange. The site was registered through MAT BAO CORPORATION and created on July 17, 2025. It resolves to the IP address 69.5.189.57, which is geolocated to Switzerland (CH) and belongs to ASN 42624, Global-Data System IT Corporation. No SSL certificate is presented, leaving the HTTP service unencrypted.

The page title returned by the server reads "KAWSMEX | Play at the best online casino based on Blockchain," aligning with the declared scam type of a crypto scam and the identified phishing kit labeled as a Gambler Scam. The domain appears on a single security blocklist and has been flagged by PhishDestroy. VirusTotal reports that 2 of 95 security vendors have marked the domain as malicious, reinforcing the suspicion of malicious intent. Gridinsoft assigns a trust score of 0 out of 100, indicating a high likelihood of abuse.

Nameserver configuration lists ns1.nameserverhub.com through ns4.nameserver, a pattern often associated with disposable hosting setups. While the exact content of the page has not been captured, the combination of brand impersonation, lack of encryption, low trust score, and detection by multiple vendors provides sufficient evidence to classify the domain as a crypto‑related impersonation campaign targeting users of MEXC. Defenders should block the domain at network perimeter, update local and cloud‑based blocklists, and monitor for any related C2 infrastructure tied to the 69.5.189.57 address. Continuous observation of newly registered domains resembling the MEXC brand is recommended to pre‑empt further impersonation attempts.