xn--kr41-onb[.]com

Analysis indicates an elevated risk level associated with this domain due to confirmed generic phishing operations that target users through deceptive web content. The infrastructure supports credential harvesting and related fraud activities that exploit common user trust mechanisms.

Technical indicators include VirusTotal detection at 12/95 security vendors, registration via NiceNIC International Group Co., Limited, resolution to IP 101.99.76.111, creation date of February 21, 2026, presence on 1 security blocklist, Gridinsoft trust score of 0/100, SSL certificate from Let's Encrypt, technologies consisting of Node.js, Ubuntu, Nginx and Express, blocking by PhishDestroy and current offline status following takedown actions.

Risk assessment confirms the domain operated as an active generic phishing vector until removal from service. Infrastructure analysis reveals deployment on standard web server components that facilitate rapid content updates typical of such campaigns. Actionable safety guidance requires manual URL verification against official sources prior to any interaction, avoidance of unsolicited links in communications, regular review of account access logs for anomalies, and reporting of similar domains to relevant hosting providers and blocklist maintainers to limit propagation of comparable threats.