klicn[.]com

The domain klicn.com, associated with a phishing scheme targeting BAVoice users, was detected by PhishDestroy on September 3, 2025. Despite its recent creation on February 11, 2024, it has already been flagged by one vendor on VirusTotal and is listed on one public blocklist. The site has been taken down, but its initial activity highlights the persistent threat of phishing attacks.

Registered through Alibaba Cloud Computing Ltd. and hosted on an IP address in China, klicn.com utilized a Let's Encrypt SSL certificate. This setup is typical for phishing operations, which often leverage reputable services to appear legitimate. The domain's quick takedown suggests effective intervention, yet it underscores the need for continuous monitoring as attackers frequently switch domains.

The presence of klicn.com on a public blocklist and its flagging by a VirusTotal vendor indicate its malicious nature. Phishing domains like this exploit the delay between registration and widespread detection, aiming to deceive users before security measures catch up. PhishDestroy's early detection pipeline plays a crucial role in identifying such threats during this vulnerable period, helping to mitigate potential damage before they can fully propagate.