o39an5b3zgdvg85emoc[.]isweb[.]co[.]kr

Analysis of the domain o39an5b3zgdvg85emoc.isweb.co.kr indicates active generic phishing activity as of July 29, 2026. VirusTotal scans show that 2 of 91 security vendors have flagged the domain, suggesting that at least a minority of detection engines recognize malicious characteristics. The domain resolves to the IPv4 address 172.66.173.30, which is the sole network indicator currently associated with the infrastructure.

The host is listed on a single security blocklist and has been explicitly blocked by the PhishDestroy service, confirming that external mitigation platforms have taken action against it. No additional public intelligence, such as SSL certificate details, HTTP response codes, page title, or brand targeting, is presently available, limiting the depth of the content‑level assessment.

Defenders should prioritize immediate network‑level blocking of the domain and its resolved IP address, incorporate the domain into internal URL filtering policies, and monitor the IP for any further malicious activity. Continuous re‑evaluation is advised, as additional detection signatures or contextual data may emerge from broader threat‑intel feeds.