koukirinze[.]info

This domain, koukirinze.info, is identified as a credential harvesting phishing site targeting users through deceptive login interfaces. Analysis indicates the domain is no longer active, having been taken offline following detection. The threat type is classified as generic phishing, with no confirmed brand impersonation at this time, though credential theft remains the primary objective. Infrastructure analysis reveals the domain was registered through Cloudflare, Inc. and resolved to the IP address 104.21.9.68. It appears on one security blocklist and is flagged by 3 of 95 security vendors on VirusTotal. The domain employed a Google Trust Services SSL certificate, PHP, and Cloudflare technologies, including HTTP/3 for communication. Additional metrics include a Gridinsoft trust score of 0/100, reinforcing its malicious classification. The domain is currently offline, reducing immediate risk to users. However, organizations and individuals should remain vigilant for similar phishing attempts. Recommended actions include blocking the domain and associated IP (104.21.9.68) at the network level, updating endpoint protection rules to detect related indicators, and monitoring for recurring phishing campaigns leveraging the same infrastructure. Users who may have interacted with the domain should reset credentials and enable multi-factor authentication on critical accounts.