kkmusic163[.]cc

This report analyzes the domain kkmusic163.cc, which presents a significant security threat. Based on the page title "网易云音乐客户端," the site impersonates the legitimate NetEase Cloud Music platform, a popular Chinese music streaming service. This indicates a phishing or credential harvesting operation, where visitors are deceived into believing they are accessing the official client download page. The primary threat is the potential theft of user credentials, personal information, or the distribution of malware disguised as software.

Technical evidence confirms the malicious nature of this domain. VirusTotal analysis shows 11 out of 95 security vendors flagged the site as malicious, with specific detections from alphaMountain.ai, BitDefender, CRDF, CyRadar, and ESET. The domain was registered through Gname.com Pte. Ltd. on 2026-02-21, a very recent date typical of malicious sites. It is hosted on IP address 172.245.67.31 within the United States, assigned to AS36352 HostPapa. The domain lacks any SSL certificate, a critical security indicator absent from legitimate services. Its nameservers, "expire1.gname-dns.com" and "expire2.gname-dns.com," also suggest a disposable registration.

The domain is currently offline. Despite its inactive status, the overall risk is assessed as high, indicated by a DOM risk score of 73 and its presence on one blocklist. The combination of a newly registered domain, impersonation of a major brand, high vendor detection rate, and lack of SSL certificate strongly classifies this as a confirmed malicious site intended for credential theft or malware delivery.