# Phishing domains under .kr

.kr accounts for 70 of the 224,866 domains in the PhishDestroy database (0.03%), with 6 new ones in the last 30 days. The most impersonated brand under .kr is Coinbase. 59 were online at the last check and 5 have a confirmed takedown.

70Reported .kr domains

0.03%Share of PhishDestroy reports

6Last 30 days

5Confirmed takedowns

## Detections per month

.kr phishing domains detected per month: 60 from 2025-11 to 2026-10; peak 11.

## Brands and registrars

### Impersonated brands

- [Coinbase](https://phishdestroy.io/brand/coinbase/)4
- [Google](https://phishdestroy.io/brand/google/)4
- [Phantom](https://phishdestroy.io/brand/phantom/)3
- [Bybit](https://phishdestroy.io/brand/bybit/)3
- [Santander](https://phishdestroy.io/brand/santander/)3
- [Uphold](https://phishdestroy.io/brand/uphold/)2
- [MetaMask](https://phishdestroy.io/brand/metamask/)2
- [Binance](https://phishdestroy.io/brand/binance/)1

### Registrars

- Gabia, (http://www.gabia.kr)14
- Inames , (http://www.inames.kr)11
- Whois (http://whois.kr)9
- Megazone(http://HOSTING.KR)8
- Whois8
- Megazone3
- viaweb(http://viaweb.kr)2
- [GOOGLE (ASN: 15169)](https://phishdestroy.io/registrar/google/)1

## Latest .kr phishing domains

The 30 most recently detected .kr domains
Domain | First detected | Status at last check | Registrar | 
[exodus.downloads.kr](https://phishdestroy.io/domain/exodus.downloads.kr/) | 2026-10-20 | Offline | Gabia, (http://www.gabia.kr) | 
[nes37.mqz.co.kr](https://phishdestroy.io/domain/nes37.mqz.co.kr/) | 2026-10-16 | Online | Gabia, (http://www.gabia.kr) | 
[staging-labs.basemath.co.kr](https://phishdestroy.io/domain/staging-labs.basemath.co.kr/) | 2026-10-11 | Online | Gabia, (http://www.gabia.kr) | 
[rainbetonline.kr](https://phishdestroy.io/domain/rainbetonline.kr/) | 2026-10-09 | Offline | — | 
[slon6.kr](https://phishdestroy.io/domain/slon6.kr/) | 2026-10-03 | Online | — | 
[covabeans.co.kr](https://phishdestroy.io/domain/covabeans.co.kr/) | 2026-09-27 | Online | Megazone(http://HOSTING.KR) | 
[yonseicoop.co.kr](https://phishdestroy.io/domain/yonseicoop.co.kr/) | 2026-09-07 | Online | — | 
[nasanenc.co.kr](https://phishdestroy.io/domain/nasanenc.co.kr/) | 2026-09-04 | Online | viaweb(http://viaweb.kr) | 
[storepartnerss.clickn.co.kr](https://phishdestroy.io/domain/storepartnerss.clickn.co.kr/) | 2026-09-04 | Offline | — | 
[validarmsnzone.dothome.co.kr](https://phishdestroy.io/domain/validarmsnzone.dothome.co.kr/) | 2026-09-01 | Online | Inames , (http://www.inames.kr) | 
[slon5.kr](https://phishdestroy.io/domain/slon5.kr/) | 2026-08-31 | Offline | Whois (http://whois.kr) | 
[storepartners.co.kr](https://phishdestroy.io/domain/storepartners.co.kr/) | 2026-08-27 | Online | — | 
[storepartnerss.co.kr](https://phishdestroy.io/domain/storepartnerss.co.kr/) | 2026-08-26 | Offline | — | 
[websantander1.dothome.co.kr](https://phishdestroy.io/domain/websantander1.dothome.co.kr/) | 2026-08-08 | Online | Inames , (http://www.inames.kr) | 
[santanderweb.dothome.co.kr](https://phishdestroy.io/domain/santanderweb.dothome.co.kr/) | 2026-08-05 | Online | Inames , (http://www.inames.kr) | 
[fifa2026.kr](https://phishdestroy.io/domain/fifa2026.kr/) | 2026-08-04 | Online | Gabia | 
[santandermx.dothome.co.kr](https://phishdestroy.io/domain/santandermx.dothome.co.kr/) | 2026-08-02 | Online | Inames , (http://www.inames.kr) | 
[content-x.kr](https://phishdestroy.io/domain/content-x.kr/) | 2026-07-28 | Online | Gabia, (http://www.gabia.kr) | 
[forest.daegu.kr](https://phishdestroy.io/domain/forest.daegu.kr/) | 2026-07-28 | Online | Megazone(http://HOSTING.KR) | 
[smartproxy.kr](https://phishdestroy.io/domain/smartproxy.kr/) | 2026-07-28 | Online | Inames , (http://www.inames.kr) | 
[agentspace.kro.kr](https://phishdestroy.io/domain/agentspace.kro.kr/) | 2026-07-27 | Online | — | 
[health.dahangis.co.kr](https://phishdestroy.io/domain/health.dahangis.co.kr/) | 2026-07-27 | Online | — | 
[erp.rndpark.co.kr](https://phishdestroy.io/domain/erp.rndpark.co.kr/) | 2026-07-27 | Online | — | 
[home-dev.fitt.kr](https://phishdestroy.io/domain/home-dev.fitt.kr/) | 2026-07-27 | Online | — | 
[svpersonas.dothome.co.kr](https://phishdestroy.io/domain/svpersonas.dothome.co.kr/) | 2026-07-16 | Online | Inames , (http://www.inames.kr) | 
[neoticket.co.kr](https://phishdestroy.io/domain/neoticket.co.kr/) | 2026-07-14 | Offline | Gabia, (http://www.gabia.kr) | 
[conditions2auth.dothome.co.kr](https://phishdestroy.io/domain/conditions2auth.dothome.co.kr/) | 2026-07-13 | Online | Inames , (http://www.inames.kr) | 
[pleorental2013.kr](https://phishdestroy.io/domain/pleorental2013.kr/) | 2026-07-03 | Offline | Gabia, (http://www.gabia.kr) | 
[novel21.co.kr](https://phishdestroy.io/domain/novel21.co.kr/) | 2026-06-22 | Online | Gabia, (http://www.gabia.kr) | 
[fe01.co.kr](https://phishdestroy.io/domain/fe01.co.kr/) | 2026-06-22 | Offline | Gabia, (http://www.gabia.kr) | 

## Related

- [Typosquatting](https://phishdestroy.io/glossary/typosquatting/)
- [EPP status codes](https://phishdestroy.io/glossary/epp-status/)
- [Newly registered domains: phishing risk](https://phishdestroy.io/newly-registered-phishing-domains)
- [Abuse Contact Lookup](https://phishdestroy.io/developer-tools/abuse-contact-lookup)
- [All TLDs](https://phishdestroy.io/tld/)

Data: PhishDestroy domain-report database, built 2026-10-22. The share is of PhishDestroy reports, not of all .kr registrations; first .kr report 2025-08-29.

Canonical: https://phishdestroy.io/tld/kr/