kilowex[.]com
Análisis de phishing y seguridad de kilowex.com
“Kilowex: Most Popular Online Crypto Casino Based on Blockchain”
kilowex.com — Contenido no disponible (HTTP 502). Suplantación de marca: Genericcrypto; Tipo de estafa: Crypto Scam. Resumen de las pruebas: VirusTotal 13/93 (ADMINUSLabs, alphaMountain.ai, BitDefender, CRDF, CyRadar); URLQuery 2 alerts; URLScan malicious verdict; PhishDestroy score 98/100. Registrador: MAT BAO.
El análisis detallado de PhishDestroy AI se mantiene en inglés para conservar el registro forense original.
Kilowex.com was registered on December 15, 2025 through MAT BAO CORPORATION. The domain resolves to 104.21.40.249, an address owned by Cloudflare, Inc. (AS13335) located in the United States. DNS records list two Cloudflare nameservers, lilith.ns.cloudflare.com and zeus.ns.cloudflare.com. No TLS certificate is presented, indicating the site served only over HTTP. The page title returned from the live host reads “Kilowex: Most Popular Online Crypto Casino Based on Blockchain,” aligning with the “Crypto Scam” classification and the Gambler Scam phishing kit observed in previous investigations. Gridinsoft assigns a trust score of 1 out of 100, reflecting extreme suspicion.
The domain appears on a single security blocklist and is actively blocked by PhishDestroy. AlienVault OTX records one pulse referencing the domain. VirusTotal analysis shows 13 of 93 scanners flagging the host as malicious. The current operational status is offline, consistent with takedown efforts. Analysis indicates that the domain was used to lure victims into a counterfeit cryptocurrency casino offering, typical of Gambler‑Scam kits that harvest credentials or direct payments to attacker‑controlled wallets.
Evidence of the kit and the page title suggest a targeted crypto‑focused phishing campaign rather than a broad‑scale spam operation. However, the absence of SSL, limited blocklist presence, and a single OTX pulse leave uncertainty regarding the full scope of victim impact and whether additional infrastructure exists beyond the observed address. Defenders should add kilowex.com to URL filtering and DNS block lists, monitor for requests to the 104.21.40.249 address, and enforce TLS‑only policies to prevent accidental connections. Incident response teams should investigate any logs containing the domain or its IP for credential theft or payment redirection. Continuous re‑scanning with multi‑engine services is recommended to capture any future changes in the site’s hosting or content.
Señales de seguridad
Inteligencia de seguridad de red
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| OpenDNS | kilowex.com |
phishing | Phishing Block |
| Hagezi Threat Feed | kilowex.com |
malicious | Sinkholed |
Proceso de respuesta ante amenazas Pipeline
Estado de la lista de bloqueados pública
Captura guardada
Inteligencia de dominios
Detalles técnicosDNS, SAN de SSL, marcas de tiempo
ICANN OVERSIGHT
Acreditación y contexto RAA
Acreditación y contexto RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Análisis de VirusTotal
Datos y informes externos
PD-20260106-F1C096 Recipient: compliance_abuse@webnic.cc ¿Te ha afectado esta página web?
Si ingresó credenciales de cuenta, información personal o de pago, o descargó un archivo de este dominio, tome medidas inmediatas. A continuación encontrará recursos que le ayudarán a informar el incidente y protegerse.
Informa a las autoridades locales
Seleccione su país para obtener contactos oficiales de cibercrimen o crear un borrador de queja →.
Comprobar cualquier dominio
Análisis de amenazas utilizando listas de bloqueo almacenadas, WHOIS, DNS y evidencia de escaneo público
Escanear ahoraDenunciar un intento de phishing
Envía los dominios sospechosos a nuestra base de datos de amenazas: protege a la comunidad
DenunciarFlujo de amenazas en tiempo real
Informes de phishing recientes y cambios de disponibilidad observados
MonitorizarMantente informado, mantente a salvo
Supervisa las amenazas en tiempo real o impugna esta entrada si crees que se trata de un falso positivo.