krkonvynov[.]live

PhishDestroy has identified krkonvynov.live as a confirmed generic phishing domain with an elevated risk level, despite currently being offline. The site posed as an official platform for AI-assisted trading, using the title 'Krkon Výnov | Official Platform for AI Assisted Trading' to lure unsuspecting victims. Security analysis reveals the domain was registered on May 15, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar often associated with suspicious domains. It resolves to IP address 104.21.57.139 and uses a Let’s Encrypt SSL certificate (E8), which is common among phishing sites for a false sense of security. VirusTotal flagged the domain with 3 out of 95 security vendors marking it as malicious, and it appears on one security blocklist. Additionally, AlienVault OTX includes it in one threat intelligence pulse, confirming its malicious reputation.

Given the generic phishing nature, the domain likely attempted to harvest login credentials, personal information, or financial data by mimicking a legitimate trading platform. Users who may have interacted with the site are advised to change passwords for any accounts used, enable two-factor authentication, and monitor financial statements for unauthorized transactions. Since the site is now offline, immediate action is less urgent, but caution remains advised for any related communications. PhishDestroy recommends running a full security scan on any device that accessed the domain and avoiding similar suspicious URLs in the future.