kokiseo[.]cfd

The domain kokiseo.cfd was a generic phishing site designed to deceive users through social engineering tactics. It did not impersonate a specific brand or employ a known crypto drainer kit but presented itself as a cryptocurrency-related opportunity under the title 'Koki SEO 2026: ビットコインETFで資産を増やす'. As of the latest verification, kokiseo.cfd has been taken offline, though it previously posed an elevated risk of credential theft or financial fraud.

Technical indicators confirm the malicious nature of kokiseo.cfd. The domain was flagged by 2 of 95 VirusTotal security vendors, including Gridinsoft and SOCRadar, and was explicitly labeled for phishing by Google Safe Browsing with the category 'SOCIAL_ENGINEERING'. It appeared on 3 security blocklists, including PhishDestroy, MetaMask, and SEAL. Registered through Porkbun LLC on February 21, 2026, kokiseo.cfd resolved to the IP address 172.67.165.245, hosted by Cloudflare in the US (AS13335). No SSL certificate was issued for the domain, and its nameservers were felipe.ns.cloudflare.com and jule.ns.cloudflare.com.

Users who interacted with kokiseo.cfd should take immediate safety steps. If credentials were entered, change passwords for all associated accounts and enable two-factor authentication. Monitor financial accounts and credit reports for signs of fraud. For reporting, submit the domain to Google Safe Browsing, PhishTank, and the registrar Porkbun LLC. Additionally, notify local cybercrime authorities or organizations like the Anti-Phishing Working Group (APWG) to aid in tracking and mitigating the threat.