krnkn5[.]online

The domain krnkn5.online has been assessed with an elevated risk level due to its classification as a generic_phishing site. This designation indicates that the domain is actively used to deceive users into providing sensitive information, such as login credentials or personal data, through a fraudulent website.

Infrastructure analysis reveals that the domain resolves to the IP address 87.236.16.23 and is registered through Above.com Pty Ltd. The domain was created on March 06, 2026, and has been flagged by 5 out of 95 security vendors on VirusTotal. This suggests a moderate level of detection among security tools, which could indicate a relatively new or evolving threat. Additionally, the domain appears on 2 security blocklists and has a Gridinsoft trust score of 0/100, indicating a complete lack of trustworthiness. The use of a Let's Encrypt SSL certificate provides a false sense of security, as it only confirms the site's identity and not its safety. The website employs technologies such as Nginx, Cloudflare, Lodash, jQuery CDN, jQuery, and FancyBox, which are common in both legitimate and malicious sites. The page title, 'Крáкен сайт — мобильные игры, Pokémon, ссылка и вход,' suggests a potential focus on mobile gaming or Pokémon-related content, which could be leveraged to attract a specific demographic.

To mitigate the risks associated with this domain, users should avoid clicking on any links or entering personal information on the site. Network administrators are advised to block traffic to this domain at the firewall or DNS level to prevent accidental access. Additionally, implementing browser extensions or security software that can detect and warn against phishing sites can provide an additional layer of protection. Regularly updating security policies and conducting user training on recognizing phishing attempts can also reduce the likelihood of successful attacks.