kabiwex[.]com

PhishDestroy has identified kabiwex.com as an active credential theft domain purporting to harvest user credentials under false pretenses. This domain employs generic phishing tactics to deceive visitors into surrendering sensitive login information, potentially facilitating unauthorized access to accounts or financial assets. Current forensic analysis does not indicate the use of a crypto drainer kit or direct brand impersonation; however, the domain's infrastructure suggests a focus on credential harvesting for subsequent exploitation.

This domain was flagged for credential theft activities, resolving to IP address 188.114.96.3 with a VirusTotal detection score of 10 out of 95. Registered through Hello Internet Corp on February 22, 2026, the domain employs a Let's Encrypt SSL certificate to enhance its legitimacy. As of this report, kabiwex.com has not been identified on Google Safe Browsing (GSB) blocklists, though it remains unlisted across most threat intelligence platforms, indicating a potentially emerging threat.

Kabiwex.com remains active and under investigation with a 'medium-risk' designation pending deeper analysis. Users are strongly advised to avoid interacting with this domain and report any suspicious encounters. Organizations should implement network-level blocking for IP 188.114.96.3 and domain kabiwex.com to mitigate potential credential theft risks. Remaining risk is classified as evolving, with potential for escalation if additional intelligence surfaces.