rkkajywf[.]click

This domain, rkkajywf.click, is flagged as a generic phishing site designed to harvest user credentials through deceptive login interfaces. Analysis indicates no association with legitimate brands or known phishing kits, suggesting a custom or low-sophistication campaign. The domain presents a blank or minimal landing page with the title 'rkkajywf.click,' likely serving as a placeholder for dynamic phishing content delivered post-compromise or via direct links. Infrastructure analysis reveals the domain was registered on February 21, 2026, through Global Domain Group LLC, an uncommon registrar for legitimate services. It resolves to the IP address 212.134.174.188, hosted on AS206300 (YUNYOO LTD) in the United Kingdom. The domain is detected by 9 out of 95 security vendors on VirusTotal, indicating a high-confidence malicious classification. It appears on one security blocklist and lacks an SSL certificate, further reducing its legitimacy. The creation date is anomalous, suggesting either a typo-squatting attempt or a placeholder for future abuse. As of the latest assessment, rkkajywf.click has been taken offline, likely due to automated takedown mechanisms or registrar intervention. However, the infrastructure remains a residual risk; the IP and registrar history may facilitate future malicious activity. Users who interacted with the domain should assume credential exposure and initiate password resets on associated accounts. Organizations are advised to block the domain and IP at the perimeter, monitor for related IOCs, and conduct retrospective log analysis for connections to 212.134.174.188.