kedwex[.]com

Analysis of the domain kedwex.com indicates it was actively involved in a cryptocurrency-related scam, specifically masquerading as an online crypto casino. The domain resolved to the IP address 172.67.201.179, hosted on Cloudflare's infrastructure (AS13335) in the United States. At the time of assessment, the domain was flagged by 12 of 95 security vendors on VirusTotal, suggesting moderate detection coverage, though not all engines may have been updated to recognize this threat. The domain appeared on at least one security blocklist, reinforcing its classification as malicious. The SSL certificate was issued by Google Trust Services under the identifier WE1, a common practice among both legitimate and malicious domains leveraging Cloudflare's CDN.

Registration details reveal the domain was created on October 10, 2025, through the registrar Atak Domain, a provider frequently associated with abusive registrations. The nameservers, maisie.ns.cloudflare.com and venkat.ns.cloudflare.com, further confirm Cloudflare's role in its infrastructure. The page title, 'Kedwex: Most Popular Online Crypto Casino Based on Blockchain,' explicitly identifies the scam type as a fraudulent gambling platform targeting cryptocurrency users. The presence of a 'Gambler Scam' phishing kit aligns with this classification, though the exact mechanics of the deception remain unconfirmed without further forensic analysis.

As of July 23, 2026, the domain has been taken offline, likely following abuse reports or enforcement actions. Defenders should treat this domain as a confirmed malicious entity, particularly in environments where cryptocurrency-related fraud poses a risk. Network-level blocking of the IP 172.67.201.179 and monitoring for related domains registered through Atak Domain may help mitigate similar threats. While the domain is currently inactive, historical logs should be reviewed for connections from internal systems to this address or associated infrastructure.