kuminex[.]com

This investigation documents the infrastructure and observed characteristics of kuminex.com, which was identified as a phishing site employing the Gambler Scam kit to stage a crypto‑focused fraud. The domain was registered on 21 February 2026 through MAT BAO CORPORATION and currently resolves to the IP address 188.114.96.3, hosted by Cloudflare, Inc. (AS13335) in the United States. No TLS certificate was observed, indicating the site was served over plain HTTP at the time of capture. The page title returned by the server reads “Kuminex: Elon Musk’s Official Crypto Casino Powered by Blockchain,” linking the fraudulent content to a high‑profile public figure and to blockchain‑based gambling.

VirusTotal analysis recorded 14 detections out of 95 security vendors, reflecting moderate consensus among scanning engines that the domain hosts malicious activity. The domain appears on two independent blocklists, PhishDestroy and Enkrypt, confirming its inclusion in threat intelligence feeds. Current operational status is offline, and no additional public Safe Browsing or Open Threat Exchange entries were found.

The limited data set prevents a full assessment of the site’s payload or credential‑harvesting mechanisms, but the combination of the Gambler Scam kit, crypto‑scam classification, and the use of a high‑value brand name suggests a targeted attempt to lure cryptocurrency enthusiasts. Defenders should add the domain and its resolving IP to blocklists, monitor Cloudflare‑origin traffic for similar patterns, and consider tightening outbound filters for cryptocurrency‑related URLs. Ongoing surveillance is advised to detect any re‑registration or relocation of the infrastructure.