qulotex[.]com

This domain, qulotex.com, was identified as part of a brand impersonation campaign targeting the cryptocurrency platform x.com. The domain was registered through PDR Ltd. d/b/a PublicDomainRegistry.com on February 21, 2026. The site's page title, 'Qulotex: Most Popular Online Crypto Casino Based on Blockchain,' suggests it was designed to appear as a legitimate crypto casino, which is a common tactic in crypto scams to lure victims into providing sensitive information or making unauthorized transactions. The domain was flagged by 9 out of 93 security vendors on VirusTotal, indicating a significant level of suspicion among the cybersecurity community.

Additionally, it appears on one security blocklist, specifically PhishDestroy, which further corroborates the domain's involvement in phishing activities. The domain's current status is offline, and it resolves to the IP address 172.67.180.7, which is located in the United States and is associated with Cloudflare, Inc. (AS13335). The SSL certificate used was WE1, which may have been intended to add a false sense of security to unsuspecting users. Gridinsoft's trust score for this domain is 1 out of 100, reflecting a very low level of trust.

Defenders should be vigilant and ensure that any references to qulotex.com are blocked in their network security systems to prevent potential phishing attacks. The exact content of the site, including its specific impersonation techniques and layout, has not been analyzed, but the evidence strongly suggests that it was used as part of a Gambler Scam targeting cryptocurrency users. Regular monitoring and updating of security measures are recommended to mitigate the risk of similar phishing infrastructure.