xn--kakaotalk-tj10b[.]com

This domain, xn--kakaotalk-tj10b.com, is actively flagged as a high-risk phishing site targeting users of the Kakao messaging platform. The domain was registered on August 15, 2025, through a widely used registrar, and currently resolves to the IP address 121.53.221.97. Analysis of its infrastructure reveals the use of modern web technologies, including Node.js, Vue.js, and Nuxt.js, which are often employed to create convincing fake login portals. The presence of analytics and tracking tools such as Naver Analytics, Google Tag Manager, and Facebook Pixel suggests an attempt to monitor victim interactions or optimize the phishing campaign’s effectiveness. The page title, displayed as '카카오,' directly references the Kakao brand, indicating an intent to deceive users into believing they are interacting with a legitimate service. Security vendors have flagged this domain, with 4 out of 95 engines on a widely recognized threat intelligence platform identifying it as malicious. Additionally, the domain appears on two security blocklists and has been referenced in 23 threat intelligence pulses, further corroborating its association with malicious activity. The SSL certificate issued by a trusted provider does not mitigate the risk, as phishing sites frequently use valid certificates to appear legitimate. While the exact content of the site has not been analyzed, the combination of brand impersonation, modern web technologies, and confirmed detections strongly suggests a credential phishing operation. Defenders should treat this domain as hostile and prioritize blocking it at the network level. Organizations are advised to monitor for connections to the IP address 121.53.221.97 and investigate any user interactions with the domain, particularly in regions where Kakao is widely used. Given its continued activity as of July 12, 2026, this domain remains a credible threat and should be addressed with urgency.