# kms-pico.ws — SUSPICIOUS

> The domain kms-pico.ws has been flagged as a phishing threat by PhishDestroy. Our automated analysis detected 2 risk indicators associated with this domain. View WHOIS data, SSL certificate analysis, and blocklist status in the full report.

## Summary
Threat Overview
The domain kms-pico.ws has been flagged as a phishing threat. PhishDestroy's automated scanning systems detected multiple risk indicators associated with this domain.
Detection Details
This domain was identified through a combination of automated analysis, community reports, and cross-referencing with global threat intelligence feeds including VirusTotal, Google Safe Browsing, and 50+ specialized blocklists.
Risk Indicators

- Domain registered on ws TLD
- Domain length: 11 characters
- Registered on a high-risk free TLD commonly used by phishers
- Vt Detected

Stay Safe
Always verify URLs before entering credentials. Use a password manager to avoid typing passwords on fake sites. Enable two-factor authentication wherever possible.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: alive (HTTP 526)
- Page title: KMSPico 2026 Download | For Windows 11, 10, 8 & Office

## Domain Intelligence
- Registered: 2026-03-11 17:07:02
- IP: 2400:52e0:1e00:2::1332:1
- IP Country: DE
- IP City: Frankfurt am Main
- IP Org: AS60068 Datacamp Limited
- Nameservers: ["ns1-04.azure-dns.com", "ns3-04.azure-dns.org", "ns2-04.azure-dns.net", "ns4-04.azure-dns.info"]
- SSL Issuer: Sectigo Limited / Sectigo Public Server Authentication CA DV R36

## Detection Status
- VirusTotal: 1 vendors flagged
  Vendors: ["SOCRadar"]
- Google Safe Browsing: clean
- Blocklists: 3 hits
  Lists: ["PhishDestroy", "MetaMask", "SEAL"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019cecde-0574-77a5-bf23-1cd6c3f4ae29.png
- PhishDestroy: https://phishdestroy.io/domain/kms-pico.ws/
- LLM endpoint: https://phishdestroy.io/domain/kms-pico.ws/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/kms-pico.ws/
Last updated: 2026-03-19