jkndg[.]org

This domain, jkndg.org, is identified as a high-risk phishing resource specializing in brand impersonation targeting Binance, a major cryptocurrency exchange. The site presents a page titled 'USDC,' a stablecoin commonly associated with fraudulent crypto drainer schemes designed to siphon digital assets from victims under the guise of legitimate transactions or account verification processes. Analysis indicates the domain is part of a broader campaign leveraging social engineering tactics to exploit users familiar with Binance’s services, particularly those engaging with USDC-related operations. Infrastructure analysis reveals the following technical indicators: the domain is flagged by 12 out of 95 security vendors on VirusTotal, indicating moderate to high confidence in its malicious classification. It was registered through NameCheap, Inc. on November 8, 2025, and resolves to the IP address 172.67.199.247, hosted on Cloudflare’s network (AS13335) in the United States. The domain appears on at least one security blocklist and is explicitly labeled as phishing by Google Safe Browsing. Notably, the domain lacks an SSL certificate, a red flag for users accustomed to encrypted connections on legitimate financial platforms. As of the latest assessment, jkndg.org has been taken offline, likely in response to detection and blocking by security mechanisms such as PhishDestroy. However, the risk of re-emergence remains significant, as threat actors frequently rotate domains and infrastructure to evade detection. Users who may have interacted with this domain are advised to immediately revoke any connected wallet permissions, monitor their cryptocurrency transactions for unauthorized activity, and report the incident to relevant financial and cybersecurity authorities. Organizations are encouraged to update their blocklists and educate users on recognizing brand impersonation tactics, particularly those involving cryptocurrency drainers.