bitmine[.]kr

This domain is flagged as a credential theft site, which means it is designed to trick users into revealing their login credentials, potentially leading to unauthorized access to their accounts. The site appears to have been used for phishing activities, targeting users by mimicking legitimate login pages or services.

Analysis indicates that bitmine.kr appears on 1 security blocklist and has 0/95 detections on VirusTotal. The domain was created on March 17, 2026, and is registered through Whois Corp. (http://whois.co.kr). Infrastructure analysis reveals that the site uses Cloudflare Browser Insights, Cloudflare, and HTTP/3, and resolves to the IP address 172.67.132.94. The SSL certificate is issued by Let's Encrypt, which is a common practice for phishing sites to gain user trust.

If a user has visited bitmine.kr, they should immediately change their passwords for all accounts that may have been compromised. It is recommended to run a full system scan for malware and to monitor account activity for any unusual or unauthorized actions. Users should also report the incident to their IT department or a trusted security professional for further assistance and to prevent potential spread of the threat.