kkmusic163[.]icu

This report analyzes the domain kkmusic163.icu. The page title, "网易云音乐客户端", indicates the site impersonates a Chinese music streaming platform, likely attempting to trick users into downloading malicious software disguised as a legitimate client. The threat is primarily social engineering to distribute malware or steal credentials, as the site is designed to appear as an official software download portal.

Technical analysis reveals the domain has a low reputation. VirusTotal shows 3 detections out of 95 scanners, with flags from alphaMountain.ai, ESET, and Forcepoint ThreatSeeker. The domain is on 1 blocklist. It was registered on 2026-02-21 via Gname.com Pte. Ltd., a registrar often associated with suspicious domains. The IP address, 172.245.67.31, is hosted in the US by AS36352 HostPapa. The domain has no SSL certificate and uses nameservers expire1.gname-dns.com and expire2.gname-dns.com, which indicate the domain may be expired or unreachable.

The domain is currently down or offline. With a risk score of 56 out of 100, it poses a moderate threat due to its impersonation of a known brand and low detection rate, but the immediate risk is mitigated by its inactive status. Users should avoid any interaction with this domain.