For the first time, we are publishing findings on kilogramix, a payment infrastructure previously flying under the radar. The investigation comes from our partners at UrduPakistanToday, a regional cybercrime watchdog, who uncovered this obscure processor during analysis of cross-border gambling transactions and phishing platforms.
Kilogramix: The Fintech Facade
On the surface, kilogramix and its subdomain eckout.kilogramix appear to represent a fintech or payment aggregation tool. But upon inspection, it functions more like a transactional shell — accepting, disguising, and redirecting funds in a way consistent with laundering models observed in gambling-related financial networks.
Sources confirm its infrastructure has been used to process transactions connected to casino platforms operating from Southeast Asia, with incoming payments masked as generic checkout services or digital purchases.
No Licensing, No Contact, No Trace
As with many laundering proxies, Kilogramix has no publicly listed ownership, compliance documentation, or licensing data. The main domain cycles between “maintenance” states or login portals, likely intended for merchant-side access only. There is no consumer-facing service or legitimate tech stack published.
The nature of these domains strongly suggests this platform is not designed for general fintech use—but for internal routing of high-risk transactions in controlled environments.
Potential Link to Pakistani Phishing Loops
While no direct activity in Pakistan is confirmed, investigators found patterns suggesting Kilogramix is being used in laundering chains that start with phishing pages cloned from popular Pakistani wallets. Fake interfaces mimicking JazzCash and EasyPaisa often serve as entry points where users unknowingly provide payment credentials, which are then used in scripted deposit/withdrawal sequences involving third-party shells like Kilogramix.
This form of multi-layer laundering has been documented before: Pakistani users become unknowing cogs in a chain that ends in casino merchant accounts, offshore wallets, or crypto bridges.
A New Name on the Watchlist
This is the first public reporting on Kilogramix, which up to now has evaded mention in open-source financial intelligence or risk advisory databases. Its sudden appearance in logs of suspicious traffic, merchant redirects, and phishing sites is a warning sign that the platform may be positioned to scale its operations in South Asia.
Conclusion: Another Shell in the Network
As gambling platforms grow more sophisticated in disguising payouts, laundering shells like Kilogramix become essential tools. Without direct branding, legal accountability, or any traceable identity, they act as unregulated highways for high-risk funds.
We thank UrduPakistanToday for their contribution to this investigation and encourage cybersecurity teams across the region to flag any infrastructure linked to kilogramix or eckout.kilogramix domains.
Further analysis is ongoing.