kesowin.com
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Quttera Web Malware Removal is a paid subscription service. Pricing, plans, and trial availability are set by Quttera. Quttera is operated by Quttera Ltd, an independent third-party company unrelated to RCS LT. PCRisk.com may earn a referral commission when users sign up through this link.
Description of kesowin.com
Kesowin.com appears to present itself as an online cryptocurrency casino focused on blockchain-based gambling. The homepage promotes account registration, casino-style games, licensed slots, player statistics, and crypto-related deposits, with marketing language suggesting transparent smart contracts and fast payouts. Based on the visible content and metadata, the site is aimed at users interested in online betting and casino gaming using digital assets.
The domain does not appear to belong to a widely recognized mainstream gambling brand, and the site claims a longer operating history than the domain registration data would suggest. The homepage uses polished promotional graphics and sports-themed branding, but the available scan data indicates this is a very newly registered domain rather than a long-established service. Based on the domain name, page content, and classification data, it would be most accurately described as a crypto gambling website.
Safety Assessment for kesowin.com
This website shows multiple risk indicators at the time of this scan. It was flagged by 13 out of 92 security engines, and several web-classification sources categorized it as phishing, fraud-related, or malware-associated. In addition, the domain is only 2 days old, has no established popularity ranking, and presents itself as a long-running crypto casino despite the very recent registration date. That mismatch may be a credibility concern.
The malware scan also produced a suspicious result tied to one JavaScript file and an external script reference, although that specific finding appears lower-confidence on its own than the broader multi-engine phishing consensus. Blacklist databases checked here were largely clean at the time of this scan, which can happen with newly registered domains before broader reputation systems fully update. Even so, the combination of a very new domain, phishing-related classifications, and a relatively high number of security-engine detections suggests elevated risk.
Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site uses a valid Let's Encrypt SSL certificate and is served through Cloudflare infrastructure, with the resolved IP associated with Cloudflare and nameservers also pointing to Cloudflare. TLS presence helps encrypt traffic in transit, but it should not be treated as proof of legitimacy. DNSSEC appears to be unsigned, which means DNS responses may not benefit from that additional layer of authenticity protection.
From a hosting perspective, the site appears to use a modern JavaScript frontend with multiple bundled Next.js-style static chunk files. One scanned script under /global/twq.js and one referenced external script were marked suspicious by the malware scan, though that specific signal appears less conclusive than the broader phishing detections. The domain's extremely recent registration is one of the more notable technical risk factors in this case.
Share your experience with this website. Was it safe? Did you encounter any issues?