kllewpq.com
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of kllewpq.com
kllewpq.com appears to present itself as a Chinese-language cryptocurrency wallet download site focused on an Android version of “Trust Wallet.” The page title and metadata promote an APK download, Web3 access, staking, DApp browsing, and storage for assets such as Bitcoin, Ethereum, and BSC tokens. The visible navigation and blog-style links suggest a landing page designed to look like a product information and download portal rather than a general-purpose corporate website.
Based on the domain name and page content, the site does not appear to use an official brand-matching domain for the wallet it references. Instead, it uses a short, unrelated-looking domain while prominently featuring the Trust Wallet name in page text and article paths. No clear operator identity is evident from the provided scan data, and the site appears to be hosted from Hong Kong infrastructure with Chinese regulatory reference links included in the page resources.
Safety Assessment for kllewpq.com
This domain shows several notable risk indicators at the time of this scan. It was flagged by 13 out of 91 security engines, with many of those detections classifying it as phishing or otherwise malicious. The page also appears to promote a cryptocurrency wallet APK download while using a domain name that does not match the brand being referenced, which may indicate an impersonation-style setup intended to attract users searching for the official wallet.
At the same time, the malware file scan did not identify flagged files in the sampled content, and major content-focused threat databases in the provided data did not report active listings at the time of this scan. However, the domain's IP address is listed on one mail-reputation blocklist, which is a weaker signal than direct phishing detections but still adds some caution. The domain is also relatively new, not ranked for traffic, and presents a financial-download theme that can carry elevated risk if users are asked to install software or enter wallet credentials.
Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site uses a valid Let's Encrypt SSL certificate with an expiry in September 2026, which indicates HTTPS was configured at the time of the scan. It is served by nginx from IP address 112.121.173.59 and appears to be hosted by Simcentric Solutions Limited in Cheung Sha Wan, Hong Kong. DNSSEC is not enabled, and the domain uses share-dns.com / share-dns.net nameservers.
From a security posture perspective, the presence of HTTPS alone should not be treated as proof of legitimacy. The combination of a young domain, unsigned DNSSEC status, unbranded domain naming, and multiple phishing-related engine detections may be more relevant than the certificate itself when assessing risk.
Share your experience with this website. Was it safe? Did you encounter any issues?