karnel[.]us[.]com

As of July 24, 2026, the domain karnel.us.com is identified as a potential phishing site. The domain is currently offline, displaying a '522: Connection timed out' page title, indicating that the server has timed out or is unable to establish a connection. This domain is blocked by the PhishDestroy system, which suggests it may have been previously involved in phishing activities. The SSL certificate for karnel.us.com is issued by Google Trust Services / WE1, a reputable certificate authority.

However, the presence of a valid SSL certificate does not inherently indicate the legitimacy of the domain, as phishers often use legitimate certificates to gain user trust. The domain resolves to the IP address 188.114.97.3, which is located in the United States and is associated with AS13335 Cloudflare, Inc. Cloudflare is known for providing DNS and content delivery services, which can be utilized by threat actors to host and manage their phishing infrastructure. The domain's nameservers are managed by CentralNic, a well-known domain registry service. Analysis indicates that the domain has been flagged by 5 out of 95 security vendors on VirusTotal, and it appears on one security blocklist, further corroborating its potential involvement in phishing.

The domain is registered through Instra Corporation Pty Ltd., an Australian domain registrar. Defenders should be cautious when encountering this domain and should ensure that any associated IP addresses and nameservers are monitored and blocked to prevent potential phishing attacks. The exact content and purpose of the site have not been analyzed, and further investigation is recommended to determine the nature of the threat.