kesogex[.]com

The domain kesogex.com was registered on February 21, 2026 and is currently listed as offline after being taken down. Technical reconnaissance shows that the domain resolves to IP address 104.21.78.224, which is hosted by Cloudflare, Inc. (AS13335) and geolocated to the United States. The SSL certificate associated with the site is identified as WE1, indicating that TLS was in place when the domain was active. Reputation scoring from Gridinsoft assigns a trust score of 1 out of 100, reflecting an extremely low level of confidence in the domain’s legitimacy.

VirusTotal analysis reports that 13 of 95 scanned security vendors flagged the domain, reinforcing the suspicion of malicious activity. The domain appears on one public blocklist and has been specifically blocked by the PhishDestroy service. An AlienVault OTX pulse cites the domain in one threat‑intel report, confirming that it has been observed by the broader security community. The known threat type is listed as a social‑media phishing campaign, suggesting that the site was used to harvest credentials or lure victims through deceptive social‑media messaging.

No additional details about the page title, brand impersonated, or exact phishing payload have been disclosed, leaving the content of the landing page unverified. Defenders should add the domain and its associated IP address to deny‑list rules, ensure that any outbound traffic to the Cloudflare edge node is monitored for anomalous behavior, and maintain awareness of the low Gridinsoft trust score as an indicator of high risk. Continuous monitoring of threat‑intel feeds for further references to kesogex.com is recommended, as well as verification that existing phishing‑filtering solutions are updated to include the domain and its associated blocklist entries.