santandermx[.]dothome[.]co[.]kr

Analysis as of August 02, 2026 indicates that the domain santandermx.dothome.co.kr remains active and is currently listed on at least one public phishing blocklist. The domain is hosted on the dothome.co.kr infrastructure, using four authoritative name servers (ns1.dothome.co.kr, ns11.dothome.co.kr, ns2.dothome.co.kr, ns3.dothome.co.kr) and resolves to the IPv4 address 112.175.185.134. Registration data shows the domain was created on March 05, 2004 and was registered through Inames Co., Ltd., a South‑Korean registrar. Security‑vendor aggregation on VirusTotal reports 13 of 91 scanning engines flagging the domain as malicious, confirming its reputation as a phishing resource.

The domain is also present on the PhishDestroy blocklist, reinforcing its classification as a high‑risk phishing site. No additional public metadata such as SSL certificate details, HTTP response codes, page title, or brand targeting has been disclosed, leaving the exact visual content and targeted victim set uncertain. Defenders should immediately add santandermx.dothome.co.kr to network‑level blocklists, update DNS filtering policies, and consider sinkholing the associated IP address 112.175.185.134 to disrupt traffic.

Continuous monitoring of the hosting provider dothome.co.kr and its name‑server set is advised, as similar domains have been observed to appear under the same infrastructure. Threat intelligence feeds should be refreshed to capture any new detections, and incident response teams should treat any credential submissions from this domain as compromised. Given the high risk rating and active status, proactive containment is recommended.