xn--kakaomeet-tj10b[.]com

Analysis of the domain xn--kakaomeet-tj10b.com, registered on August 15, 2025, through NameCheap, Inc., confirms its classification as an active phishing site targeting users of the Kakao platform. The domain's page title, '카카오,' directly references the Kakao brand, indicating an intent to deceive users into believing they are interacting with legitimate Kakao services. Infrastructure analysis reveals the domain resolves to the IP address 211.183.211.19 and employs a Let's Encrypt SSL certificate, which is commonly used by both legitimate and malicious sites to encrypt traffic and evade basic security filters. The domain is flagged by two security blocklists and appears in 23 threat intelligence pulses on AlienVault OTX, suggesting widespread recognition of its malicious nature. While only one of 95 security vendors on VirusTotal currently detects this domain, this limited detection rate does not diminish the confirmed risk, as phishing domains often evade initial scans through rapid rotation or obfuscation techniques. Technologies detected on the domain include Node.js, Vue.js, Nuxt.js, Naver Analytics, Google Tag Manager, Facebook Pixel, and Kakao-specific integrations, which may be leveraged to enhance the site's legitimacy or track victim interactions. The domain remains active as of July 12, 2026, and has been blocked by at least two security providers. Defenders are advised to treat this domain as high-risk and implement immediate blocking measures at the DNS, IP, and URL levels. Network monitoring should prioritize identifying any internal traffic to this domain, particularly from endpoints accessing Kakao-related services. Given the domain's age and persistent activity, further investigation into its hosting infrastructure and associated threat actors is recommended to disrupt related phishing campaigns.