klayden[.]io
“Klayden Crypto Payments | Fast, Secure Wallet”
Ringkasan bukti
Analysis of the domain klayden.io indicates it was actively used for crypto-related phishing operations prior to being taken offline. The domain was registered on February 26, 2026, through NAMECHEAP INC, with nameservers pointing to amsbs3.hostwindsdns.com and amsbs4.hostwindsdns.com, a configuration associated with Hostwinds LLC hosting infrastructure. The site resolved to the IP address 185.145.97.49, located in the Netherlands, and was served over HTTP/3 using LiteSpeed web server technology. The page title, 'Klayden Crypto Payments | Fast, Secure Wallet,' explicitly suggests a focus on cryptocurrency wallet services, aligning with the 'Crypto Scam' classification provided in threat intelligence sources. The domain was flagged by one security blocklist and assigned a trust score of 0/100 by Gridinsoft, indicating high confidence in its malicious nature.
PhishDestroy also blocked the domain, further corroborating its use in phishing activity. A single security vendor on VirusTotal detected the domain as malicious, though the limited detection count does not diminish the evidence of abuse. The SSL certificate was issued by Let's Encrypt (R13), a common choice for both legitimate and malicious sites due to its free and automated issuance process. As of July 25, 2026, klayden.io is offline, reducing immediate risk to end users.
However, defenders should monitor for re-activation or migration of the phishing infrastructure to new domains or IPs. The use of Hostwinds hosting and NAMECHEAP registration is consistent with patterns observed in other phishing campaigns, and security teams are advised to review logs for connections to 185.145.97.49 or related domains. No specific brand impersonation beyond the 'Klayden' naming convention was confirmed in the available data, and the exact mechanics of the scam (e.g., credential harvesting, wallet drainer) remain unanalyzed due to the lack of page content review.
Snapshot bukti yang dikirim
- Dikirim
- Catatan buku besar
- 1
- ID kasus
PD-20260324-15FAEA- Judul halaman yang direkam
- Klayden Crypto Payments | Fast, Secure Wallet & Instant Transfers
- Artefak PDF
- Bukti PDF
Teks bukti lengkap
Policy Violations: Domain Registration Agreement prohibits hacking, misuse of domain to conduct attacks, scam and fraudulent activities; AUP allows immediate suspension
Applicable Laws: CFAA 18 U.S.C. §1030, Wire Fraud 18 U.S.C. §1343, CAN-SPAM Act
Riwayat laporan 1
- Laporan 2 ⚠️ ESCALATION #2 (513h active): Phishing - klayden[.]io
Data Coverage
Alur Tanggapan Ancaman Pipeline
Cakupan daftar blokir
10 sumber eksternal dipantau · snapshot tersimpan 11/08/2026
Analisis VirusTotal
Analisis Performa Situs
Google PageSpeed Insights — mobile performance audit of klayden.io · checked Mar 24, 2026
Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive