akunux[.]top

This domain, akunux.top, is identified as a generic phishing site designed to harvest user credentials through deceptive login interfaces. Analysis indicates no direct association with a specific brand or cryptocurrency drainer kit, though the use of Vue.js suggests a dynamic frontend likely intended to mimic legitimate authentication portals. The infrastructure does not exhibit overt ties to known phishing frameworks, but the presence of HSTS and Cloudflare protections may have been leveraged to evade detection and prolong operational uptime. Technical indicators confirm the domain was registered on March 12, 2026, through Dynadot LLC, resolving to the IP address 104.21.74.138. VirusTotal detections stand at 14 out of 95 security vendors, while Google Safe Browsing explicitly flags the domain under the SOCIAL_ENGINEERING category. The domain appears on two independent security blocklists, further corroborating its malicious classification. Cloudflare Browser Insights and HTTP/3 support suggest an attempt to blend in with legitimate traffic patterns, complicating automated detection efforts. As of the latest assessment, akunux.top has been taken offline, though residual risk persists due to the domain's registration remaining active. The registrar, Dynadot LLC, has not yet released public statements regarding enforcement actions. Organizations are advised to monitor for re-registration attempts or shifts in hosting infrastructure, as phishing operators frequently re-deploy domains under altered configurations. Network defenders should ensure endpoint protections block both the domain and its resolved IP, while users should be educated on recognizing generic phishing tactics, particularly those leveraging modern frontend frameworks to simulate trust.