hkexes[.]com

The domain hkexes.com has been identified as a high-risk generic phishing threat. This domain appears to be masquerading under the name 'TAIZI,' although it does not explicitly mimic a well-known brand. There is no evidence indicating the use of a specific drainer kit associated with this domain. The primary objective appears to be the unauthorized collection of sensitive information from unsuspecting users, potentially leading to identity theft or financial loss.

Technically, the domain hkexes.com is flagged by 1 out of 95 security vendors on VirusTotal, indicating a low detection rate but a high potential risk due to its active nature. The domain was registered on May 22, 2026, through a well-known registrar, Cloudflare, Inc., suggesting recent activity with possibly malicious intent. It resolves to the IP address 188.114.96.3 and has an SSL certificate issued by Let's Encrypt. As of the latest analysis, there is no explicit listing or flagging by Google's Safe Browsing (GSB) service, and it appears on a limited number of blocklists.

Currently, the domain remains active, representing an ongoing threat to internet users. The low detection rate suggests that many security systems may not yet recognize this domain as malicious, increasing its potential to inflict harm. Users are advised to exercise caution and avoid interaction with this domain. Security teams should monitor network traffic for any interactions with this IP address or domain and consider proactive blocking measures to mitigate risk. Continuous updates to security tools and awareness training for potential phishing tactics are recommended to reduce exposure to such threats.