cowp[.]or[.]kr

The domain cowp.or.kr, associated with a high threat score of 85/100, is confirmed as a generic phishing operation and is currently down. It has been flagged as malicious by 5 out of 95 security vendors, including notable names like Forcepoint ThreatSeeker and Fortinet, and is listed on 2 public blocklists. Google Safe Browsing has not flagged this domain, indicating it may not have been widely recognized prior to its takedown.

Registered with Gabia, Inc. since January 8, 2014, the domain was first detected in the database on October 23, 2025. The hosting IP is 219.253.141.149. The absence of a specific brand being impersonated suggests a broader phishing strategy rather than targeting a single entity.

Given the high threat score and confirmed malicious nature of this domain, it is advisable to block cowp.or.kr at the perimeter and submit a report to the registrar's abuse desk for further investigation.