kakaodocu[.]com

Analysis indicates that kakaodocu.com was registered on August 15 2025 through NameCheap. The domain resolves to IP 211.183.211.19, which belongs to AS152199 owned by Kakao Corp and is geolocated in South Korea. No TLS certificate is presented, and HTTP requests return no response because the site is currently taken offline. The authoritative name servers are kianchau.ns.cloudflare.com and leia.ns.cloudflare.com, confirming use of Cloudflare DNS.

The only observed page metadata is a title tag containing the Korean word “카카오”. No additional content has been harvested, and the lack of SSL suggests the site was not serving encrypted traffic. Reputation services rate the domain poorly: Gridinsoft assigns a trust score of 0 out of 100, and the domain appears on a single security blocklist, where it is listed by PhishDestroy. VirusTotal analysis shows that four out of ninety‑five scanners flagged the domain, indicating at least limited detection by anti‑malware engines.

Taken together, the evidence aligns with a generic phishing operation that likely attempted to impersonate a Kakao service, as implied by the title. However, because the site is offline, the current payload, credential‑stealing mechanisms, and any associated phishing kits remain unknown. Defenders should continue to block the domain at perimeter and DNS layers, monitor for any resurgence of the same hostname or its IP address, and include the IP and name‑server pair in threat‑intel feeds. Additional investigation of the four VirusTotal detections may reveal the specific malware or phishing kit used, supporting broader attribution and remediation efforts.