kulnde-dkev[.]blogspot[.]com[.]uy

The domain kulnde-dkev.blogspot.com.uy is identified as a brand impersonation threat targeting WordPress and is currently offline. This domain poses an elevated risk to users who may be tricked into visiting it, potentially leading to the compromise of their credentials or other sensitive information.

Analysis indicates that kulnde-dkev.blogspot.com.uy is flagged by 15 of 95 VirusTotal vendors as a brand impersonation threat. The domain is registered through GOOGLE (ASN: 15169) and resolves to the IP address 85.128.172.63, which is located in Poland (PL) and is part of the AS15967 Nazwa.pl Sp.z.o.o. network. The domain appears on 2 security blocklists, specifically PhishDestroy and PhishingDB, further confirming its malicious nature. The SSL certificate for this domain is issued by Google Trust Services / WE2, which may add an unwarranted layer of trust for unsuspecting users.

Given the current status of the domain as offline, it is recommended that users remain vigilant and avoid any links or references to kulnde-dkev.blogspot.com.uy. Security teams should continue monitoring this domain for any signs of reactivation and ensure that it remains blocked in their network defenses. Additionally, users should be educated on recognizing brand impersonation attempts and should only access legitimate WordPress sites through verified URLs or bookmarks.