truycap-kcex-user[.]com

The domain www.truycap-kcex-user.com is a confirmed phishing site engaged in brand impersonation targeting Apple users. It presents itself as a legitimate Apple login or account management portal but is designed to harvest user credentials through deceptive login forms. No crypto drainer kit was identified, but the site poses an elevated risk due to its active credential theft intent. As of the latest verification, www.truycap-kcex-user.com has been taken offline.

Technical indicators confirm the malicious nature of www.truycap-kcex-user.com. The domain was flagged by 2 of 95 VirusTotal security vendors, including Certego and SOCRadar, and appears on 1 security blocklist (PhishDestroy). It was registered on July 10, 2025, through CNOBIN INFORMATION TECHNOLOGY LIMITED and resolves to the IP address 45.10.243.7, hosted by DDOS-GUARD LTD in Russia (AS57724). No SSL certificate is present, and the observed page title is 'Đăng Nhập KCEX | Truy Cập Bảng Điều Khiển Giao Dịch An Toàn'. The domain is also recorded in 1 AlienVault OTX threat intelligence pulse, with a Gridinsoft trust score of 0/100.

Users who interacted with www.truycap-kcex-user.com should immediately change their Apple ID and any other reused passwords, enable two-factor authentication (2FA), and monitor accounts for unauthorized activity. Report the phishing domain to Apple via their official reporting channels and submit the URL to platforms like Google Safe Browsing, PhishTank, or the Anti-Phishing Working Group (APWG) to aid in broader takedown efforts. If financial or personal data was entered, consider contacting relevant institutions to secure accounts and watch for signs of fraud.