kowux[.]com

On July 23, 2026 analysts observed that the domain kowux.com is currently offline but retains a set of indicators consistent with a crypto‑focused phishing operation. The domain was registered on 21 February 2026 through REALTIME REGISTER B.V. and resolves to the IPv6 address 2606:4700:3034::6815:385b, which is hosted by Cloudflare, Inc. (AS13335) in the United States. No TLS certificate was found, indicating the site was served over plain HTTP when active. The page title retrieved during the brief live period reads “Kowux: Elon Musk’s Official Crypto Casino Powered by Blockchain,” matching the declared scam type of a crypto scam and aligning with the Gambler Scam phishing kit reported by security researchers.

Gridinsoft assigned a trust score of 0 out of 100, and the domain is listed on at least one security blocklist and has been flagged by PhishDestroy. AlienVault OTX includes the domain in a single threat‑intel pulse, confirming that it has been shared within the broader community. VirusTotal analysis shows 15 of 95 scanning engines returned a positive detection, reinforcing the malicious assessment.

The combination of a zero‑trust score, absence of encryption, and presence on multiple blocklists denotes a high confidence that the site was used for fraudulent credential or cryptocurrency collection. Defenders should immediately add kowux.com to perimeter blocklists, prevent connections to its resolved IP address, and monitor for any re‑registration or use of the same phishing kit in new domains. Continuous observation of Cloudflare‑hosted IP ranges for similar activity is recommended, as is sharing these indicators with downstream partners to improve collective detection.