auth--io-kraklin[.]square[.]site

This report analyzes the domain auth--io-kraklin.square.site. The site displays the page title "Just a moment...", indicating it is a parked or placeholder page, likely used for a phishing or credential harvesting campaign. The domain name structure suggests an attempt to impersonate authentication interfaces for platforms like Auth0 or a similar identity service, though no specific brand impersonation is confirmed. The primary threat is that this site may be used to trick users into entering sensitive credentials or personal information.

Technical evidence shows the domain was flagged by 14 out of 95 VirusTotal vendors, including ADMINUSLabs, ChainPatrol, alphaMountain.ai, BitDefender, and CyRadar. It is listed on 1 blocklist. The domain is hosted on IP address 74.115.51.4, located in the United States, under AS27647 (Weebly, Inc.). It was registered on 2019-02-05 through registrar MarkMonitor, Inc. The SSL certificate is issued by Let's Encrypt with serial E7. Nameservers are ns-1248.awsdns-28.org, ns-1816.awsdns-35.co.uk, ns-311.awsdns-38.com, and ns-810.awsdns.

The current status of this domain is BANNED, indicating it has been identified as malicious and should be blocked. The risk level is high due to the high detection rate and its use for potential phishing activities. Users should avoid interacting with this site.