kleankelp[.]duckdns[.]org

PhishDestroy has identified kleankelp.duckdns.org as a high-risk generic phishing domain. This domain was actively used to deceive users into divulging sensitive information, though its specific impersonation target remains unclear. The threat level is rated as high due to the domain's malicious indicators and its history of being flagged by multiple security vendors.

Technical analysis reveals that kleankelp.duckdns.org was created on May 25, 2026, using DuckDNS as the registrar. The domain resolves to IP address 62.60.226.105 and is secured with a Let's Encrypt SSL certificate (R13). VirusTotal reports that 20 out of 95 security vendors flagged this domain as malicious, and it appears on one security blocklist. Google Safe Browsing also identifies it as a phishing threat. As of the latest check, the domain has been taken offline, indicating possible intervention by authorities or the hosting provider.

To stay safe, users should never enter personal information, passwords, or financial details on suspicious websites. Always verify the authenticity of a site by checking the URL carefully and looking for official communication from known entities. If you encounter domains like kleankelp.duckdns.org, report them immediately to PhishDestroy and update your browser's security settings. Enable two-factor authentication on important accounts and use a password manager to avoid reusing credentials across sites.