kalibitex[.]top

Analysis on July 23, 2026 indicates that the domain kalibitex.top was registered on November 12, 2025 through Gname.com Pte. Ltd. and resolves to the Cloudflare address 104.21.11.77, located in the United States under ASN 13335. The domain is presently taken offline, but it was previously flagged by multiple security services. PhishDestroy has blocked the domain and it appears on one public security blocklist. Google Safe Browsing classifies it as social engineering, and ten of ninety‑five VirusTotal scanners flagged the site, reflecting a moderate detection rate.

The Gridinsoft trust score is 0 out of 100, indicating a lack of credibility. The page title observed during the brief scan was “Uniswap,” and the site is categorized as a crypto scam that impersonates Ethereum, suggesting an attempt to lure users into fraudulent cryptocurrency transactions. No SSL certificate was presented, leaving the connection unencrypted. The domain uses the Cloudflare nameservers phoenix.ns.cloudflare.com and terin.ns.cloudflare.com.

While the exact content of the landing page has not been publicly disclosed, the available evidence points to a brand‑impersonation campaign targeting Ethereum users. Defenders should continue to block kalibitex.top at perimeter firewalls and DNS resolvers, add the domain to threat intelligence feeds, and monitor for any re‑registration or reuse of the associated IP address. Because the infrastructure relies on Cloudflare, future iterations may leverage the same CDN provider, so watch for similar patterns in newly observed domains that resolve to 104.21.11.77 or share the same nameserver set. Given the high‑risk classification and the confirmed impersonation of a major blockchain brand, organizations handling cryptocurrency assets should treat any correspondence referencing Uniswap or Ethereum from this domain as malicious.