persikiposkidke[.]com

This domain, persikiposkidke.com, operates as a credential harvesting phishing site designed to deceive users into submitting sensitive login information. Analysis of the page title, "Friend," suggests an attempt to mimic a trusted social or communication platform, likely leveraging social engineering tactics to prompt users to enter usernames, passwords, or other authentication details. The site employs HTTP/3 and HSTS protocols, which may be used to lend an appearance of legitimacy while obfuscating malicious intent through modern web technologies. Infrastructure analysis reveals multiple indicators of compromise. The domain was registered on February 21, 2026, through NiceNIC International Group Co., Limited, a registrar frequently associated with high-risk domains. It resolves to the IP address 188.114.97.3, which is part of a content delivery network known for hosting both legitimate and malicious content. Detection metrics further substantiate the threat: 5 out of 95 security vendors on VirusTotal flagged the domain as malicious, and it appears on at least one security blocklist. The SSL certificate, issued by Google Trust Services, does not mitigate the risk, as phishing sites commonly exploit valid certificates to bypass initial security checks. Users who visited persikiposkidke.com should take immediate remedial action. If any credentials were entered, they must be changed across all platforms where they were reused, prioritizing email, financial, and social media accounts. Devices used to access the site should undergo a full antivirus scan to detect potential malware or browser-based exploits. Additionally, users are advised to monitor accounts for unauthorized activity and enable multi-factor authentication where available. Given the domain's current offline status, further attempts to access it may indicate persistent threats or redirects to other malicious infrastructure.