kora360[.]pro

The domain kora360.pro, registered on February 22, 2026 through NiceNIC International Group Co., Limited, is currently active and resolves to the IP address 172.67.148.11, which belongs to AS13335 Cloudflare, Inc. in the United States. The site presents an SSL certificate issued by Google Trust Services under the WE1 certificate authority, indicating that HTTPS is correctly configured. HTTP requests receive a 301 redirect response, suggesting the site may be forwarding traffic to another location or resource. The domain is listed on a single external security blocklist and has been explicitly blocked by the PhishDestroy service, reflecting its identification as malicious infrastructure.

Reputation scoring from Gridinsoft assigns a trust score of 0 out of 100, reinforcing the perception of high risk. VirusTotal analysis shows that three of ninety‑five security vendors flagged the domain, providing independent corroboration of its suspicious nature. Technical fingerprinting reveals the presence of a WordPress content management system backed by MySQL and PHP, along with third‑party integrations such as Sovrn, Simpli.fi, ShareThis, DTScout, and Cloudflare Browser Insights, which are commonly observed in malicious sites that seek to harvest traffic data or serve additional payloads. The authoritative nameservers are kara.ns.cloudflare.com and jermaine.ns.cloudflare.com, both hosted by Cloudflare, a pattern often used to obscure the true origin of phishing infrastructure.

The page title extracted from the site reads "كورة 360 - kora 360 بث مباشر كورة لايف 360kora," indicating the site is positioned as a live sports streaming portal, though no direct evidence of a specific brand impersonation has been observed. Defenders should block DNS resolution to kora360.pro, add the IP address 172.67.148.11 to network‑level deny lists, and monitor for related traffic to the identified Cloudflare nameservers.