jemowex[.]com

Analysis of jemowex.com, observed as an offline site on 24 July 2026, shows it was registered through Cloudflare, Inc. The domain resolves to the Cloudflare edge address 188.114.96.3, located in the United States and announced as AS13335 Cloudflare, Inc. Nameservers amber.ns.cloudflare.com and cesar.ns.cloudflare.com confirm the hosting relationship. No TLS certificate is presented, indicating the site was served over plain HTTP before being taken down. The page title retrieved from the last snapshot reads “JEMOWEX | Play at the best online casino based on Blockchain,” which aligns with the listed scam type of a crypto‑based gambling scheme. The site is flagged as a brand‑impersonation of “foundation,” and the underlying phishing kit has been identified as the Gambler Scam template.

Reputation data is highly negative: Gridinsoft assigns a trust score of 1 out of 100, and the domain appears on a single security blocklist. PhishDestroy has already blocked the domain, and four of ninety‑five VirusTotal scanners have reported malicious indicators. The combined evidence points to a crypto‑scam operation that leverages the perceived legitimacy of the foundation brand to lure victims into a blockchain casino narrative. Defenders should immediately deny any network traffic to 188.114.96.3 and add jemowex.com to local firewall and DNS filtering policies.

Because the domain uses Cloudflare’s public DNS, future re‑hosting on the same IP range is possible; continuous monitoring of the Cloudflare‑owned IP space for similar brand‑impersonation patterns is advised. Correlation with existing Gambler Scam kit indicators can improve detection rules in intrusion‑prevention systems. Organizations should also ensure that users are aware that legitimate foundation communications never reference online gambling or blockchain casinos, and that any unsolicited messages containing such references be treated as suspicious.