kilowex[.]com

Kilowex.com was registered on December 15, 2025 through MAT BAO CORPORATION. The domain resolves to 104.21.40.249, an address owned by Cloudflare, Inc. (AS13335) located in the United States. DNS records list two Cloudflare nameservers, lilith.ns.cloudflare.com and zeus.ns.cloudflare.com. No TLS certificate is presented, indicating the site served only over HTTP. The page title returned from the live host reads “Kilowex: Most Popular Online Crypto Casino Based on Blockchain,” aligning with the “Crypto Scam” classification and the Gambler Scam phishing kit observed in previous investigations. Gridinsoft assigns a trust score of 1 out of 100, reflecting extreme suspicion.

The domain appears on a single security blocklist and is actively blocked by PhishDestroy. AlienVault OTX records one pulse referencing the domain. VirusTotal analysis shows 13 of 93 scanners flagging the host as malicious. The current operational status is offline, consistent with takedown efforts. Analysis indicates that the domain was used to lure victims into a counterfeit cryptocurrency casino offering, typical of Gambler‑Scam kits that harvest credentials or direct payments to attacker‑controlled wallets.

Evidence of the kit and the page title suggest a targeted crypto‑focused phishing campaign rather than a broad‑scale spam operation. However, the absence of SSL, limited blocklist presence, and a single OTX pulse leave uncertainty regarding the full scope of victim impact and whether additional infrastructure exists beyond the observed address. Defenders should add kilowex.com to URL filtering and DNS block lists, monitor for requests to the 104.21.40.249 address, and enforce TLS‑only policies to prevent accidental connections. Incident response teams should investigate any logs containing the domain or its IP for credential theft or payment redirection. Continuous re‑scanning with multi‑engine services is recommended to capture any future changes in the site’s hosting or content.