web[.]a-krx[.]top

The domain web.a-krx.top was registered on March 02, 2026 through NameSilo, LLC and is currently listed as offline. DNS resolution points to the IP address 188.114.96.3, which belongs to AS13335 Cloudflare, Inc. and is geolocated in the United States. The domain uses the Cloudflare nameservers phil.ns.cloudflare.com and simone.ns.cloudflare.com, but it does not present an SSL certificate, indicating that any HTTP service would be delivered without transport encryption. VirusTotal analysis shows that five of ninety‑three security vendors flagged the domain, providing a modest detection signal.

Independent blocklist monitoring confirms inclusion on three reputable blocklists, specifically PhishDestroy, MetaMask, and SEAL, reinforcing the classification as a malicious resource. The sole page title retrieved from the site is "Global KRX," but no further content details are available because the site is no longer reachable. The combination of recent registration, Cloudflare hosting, absence of TLS, multiple vendor detections, and blocklist presence suggests an active generic phishing campaign targeting users who may be lured by the "Global KRX" branding.

Defenders should update network and endpoint blocklists to include web.a-krx.top and its resolving IP 188.114.96.3, monitor for any future DNS changes, and enforce TLS inspection policies to detect unencrypted traffic to this host. Threat intelligence platforms should record the domain’s creation date, registrar, and detection count for correlation with similar campaigns. Continuous observation is recommended to verify whether the infrastructure is re‑used for new phishing attempts.