kerberosmarket[.]info

The domain kerberosmarket.info was first observed on May 19, 2026 and is presently classified as a generic phishing site. The web server returns HTTP status code 200 for requests to its root path, indicating that the site is actively serving content. DNS resolution points to the IP address 104.21.11.197, which is hosted by Cloudflare, Inc. and geo‑located in California, United States. Authoritative name resolution is provided by the Cloudflare nameservers sterling.ns.cloudflare.com and irena.ns.cloudflare.com.

The TLS certificate presented by the host is issued by the authority identified as WE1, establishing a valid HTTPS connection. Reputation scoring from Gridinsoft assigns a trust score of 0 out of 100, reflecting a complete lack of trust. The domain appears on a single security blocklist and has been blocked by the PhishDestroy filtering engine. Registration was performed through Dynadot Inc., a registrar commonly associated with short‑lived malicious domains.

Threat intelligence from AlienVault OTX includes kerberosmarket.info in one pulse, confirming community awareness of the threat. VirusTotal analysis shows that 1 of 95 scanned security vendors flagged the domain as malicious, consistent with its phishing behavior. The domain remains active as of the report date, July 12, 2026, and no evidence of takedown or remediation has been recorded.

Defenders should block DNS resolution for kerberosmarket.info at the network perimeter and enforce TLS inspection to capture any malicious payloads. Email gateways should be updated to include the domain in URL and attachment filtering rules, and any existing indicators of compromise should be correlated with the IP address 104.21.11.197. Continuous monitoring of the associated Cloudflare nameservers is recommended, as the infrastructure could be repointed to new hosts without notice.