gw-kuake[.]com[.]cn

The domain www.gw-kuake.com.cn has been flagged for generic phishing activities, with a high-risk level. It is currently active and resolves to the IP address 203.168.128.38. The domain was registered on May 09, 2026, through 浙江贰贰网络有限公司. It has been detected in 2 threat intelligence pulses on AlienVault OTX, indicating ongoing recognition in the cybersecurity community. Furthermore, the domain is blocked by PhishDestroy, which signifies active efforts to mitigate its impact on potential victims.

Analysis of the domain's security posture reveals that it is equipped with an SSL certificate issued by Let's Encrypt, a common practice among both legitimate and malicious domains to enhance credibility. VirusTotal reports show that 4 out of 95 security vendors have flagged this domain, which suggests that while a minority of security solutions recognize the threat, there remains a significant number that do not, thereby complicating the detection landscape. This disparity in detection rates underlines the necessity for organizations to implement comprehensive monitoring strategies that do not solely rely on a single vendor's intelligence.

The domain also appears on one security blocklist, further corroborating its classification as a phishing threat. Defenders should prioritize blocking this domain across their networks and monitor related infrastructure for any potential phishing attempts. Additionally, organizations should consider raising awareness among users regarding the risks associated with such domains and encourage reporting of any suspicious communications that may originate from or reference this domain. The combination of flagged intelligence, blocklist inclusion, and its active status necessitates immediate attention to prevent potential exploitation.