gongsinet[.]kr

PhishDestroy has identified gongsinet.kr as an elevated-risk threat involving brand impersonation targeting Apple, a common tactic used to harvest credentials or personal data from unsuspecting victims. Despite its current offline status, the domain's history and infrastructure indicate a deliberate attempt to deceive users into believing they were interacting with an official Apple service.

The domain was registered on May 24, 2023, through Megazone (HOSTING.KR) and resolves to IP address 203.245.44.246. Its SSL certificate was issued by GoGetSSL RSA DV CA, a certificate authority often abused by malicious actors due to its low validation requirements. VirusTotal analysis shows that 5 out of 95 security vendors flagged the domain as malicious, and it appears on two security blocklists. AlienVault OTX includes it in one threat intelligence pulse, further corroborating its malicious nature. The page title, '가야롯데캐슬모델하우스,' is unrelated to Apple, suggesting the site may have been repurposed or used as a decoy.

To protect against Apple brand impersonation scams, users should always verify the URL before entering credentials or personal information. Official Apple domains end in apple.com, and any variation should be treated with suspicion. Avoid clicking on links in unsolicited emails or messages claiming to be from Apple. Enable two-factor authentication on your Apple ID and monitor accounts for unauthorized access. If you suspect you have interacted with this domain, change your passwords immediately and report the incident to Apple's security team.