stonexkr[.]net

PhishDestroy identifies stonexkr.net as an active credential harvesting phishing domain targeting financial sector users. The domain is currently operational and engages in fraudulent activities designed to trick victims into submitting sensitive login credentials. This domain was flagged by 1 of 95 VirusTotal security vendors, indicating limited-but-confirmed malicious activity. stonexkr.net was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED, resolves to IP address 185.178.208.143, and was created on April 08, 2026. It utilizes a Let's Encrypt SSL certificate to enhance perceived legitimacy, although this does not indicate trustworthiness. The low VirusTotal detection rate may reflect either a newly deployed campaign or evasion tactics. PhishDestroy assesses stonexkr.net as an elevated-risk domain engaged in active credential phishing. Users and organizations should immediately block this domain at the network and browser levels. If any credentials have been entered, reset passwords immediately and enable multi-factor authentication where available. Report the domain to your security team or via PhishDestroy’s submission portal for continued monitoring and takedown support.