kycpinet[.]com

This domain, kycpinet.com, is identified as a phishing portal specifically designed to impersonate PiNet’s Know Your Customer (KYC) verification process. Analysis confirms the threat type as generic_phishing with a targeted focus on credential harvesting. As of the latest assessment, the domain has been taken offline, though prior activity indicates a deliberate attempt to deceive users into submitting sensitive authentication details. Infrastructure analysis reveals the domain was registered on March 13, 2024, through Nhan Hoa Software Company Ltd. and resolves to the IP address 103.124.95.33, hosted on AS131353 in Vietnam. Security vendors on VirusTotal flagged kycpinet.com at a rate of 15 out of 95, while it appears on one security blocklist. The SSL certificate is issued under gir02.titmit.xyz, a non-standard naming convention that further deviates from legitimate PiNet infrastructure. The page title, 'KYC - PiNet,' directly mimics the branding of the targeted service, reinforcing the phishing intent. Current status indicates the domain is offline, though residual risk remains due to potential re-activation or migration to alternative infrastructure. Organizations are advised to proactively block kycpinet.com at the DNS and proxy levels, including its resolved IP (103.124.95.33) and associated SSL certificate (gir02.titmit.xyz). Endpoint protection rules should be updated to detect and prevent access to this domain and its derivatives. Users who may have interacted with the site should reset credentials immediately and enable multi-factor authentication where available. Continuous monitoring for similar domains registered under the same registrar or IP range is recommended to mitigate future threats.