Is kr53.sogirl.so safe?
http://kr53.sogirl.so/
Checked on
How we checked
Coverage: partial · 4 of 6 applicable core capabilities
- Antivirus (69 of 90 engines answered) · saved result: did not fully complete
- Google Safe Browsing: completed
- page reading · not available: did not fully complete
- page capture: completed
- domain records: completed
- web research: completed
A bare Korean "domain change notice" page that forwards visitors to another numbered subdomain, with no readable operator, contact or policy text
kr53.sogirl.so renders a single dark card headed "AV쏘걸" with the Korean line "접속 도메인 변경안내" (access domain change notice) and one pink button pointing to https://kr89.sogirl.so, another numbered subdomain of the same parent domain. There is no navigation, no product or price listing, no checkout, and no contact, terms or policy link anywhere on the page. Automated reads of the site were refused with HTTP 403, so the site's own pages could not be reviewed. Technical checks are clean — no Safe Browsing warning, a valid encrypted connection, and a hosting IP with no saved abuse reports — but those describe detections, not who runs the site. With the operator unverified and the destination unresolved, the score sits in the moderate-risk band.
Saved site captureCaptured safely during this scanSaved antivirus result from Jul 15, 2023: no detections across 69 enginesWhere this site sits
- Dangerous1–20
- High Risk21–44
- Moderate Risk45–69
- Low Risk70–84
- Safe85–100
The score combines saved evidence strength and analysis quality. Coverage is reported separately.
Why 55/100
Moderate Risk covers scores 45–69. 3 findings pulled the score down; 3 pushed it up.
What pulled the score down
- MinorThe only call to action sends visitors from kr53.sogirl.so to kr89.sogirl.so, another numbered subdomain of the same parent domain.
- MinorThe site refused automated reads with HTTP 403 on both attempts, so its page, contact, About and policy text was never reviewed.
- MinorNo navigation, contact details, terms or policy links are visible anywhere on the rendered page.
What pushed the score up
- SupportsThe browser threat feed returned no threat warning for the host.
- SupportsThe saved TLS check found a valid encrypted connection.
- SupportsThe parent domain sogirl.so was first registered on 2021-11-24 and is about 1808 days old; the subdomain's own age is not shown.
No points per finding are stored for this report: our analysis weighed all findings together to set the score. Each finding shows its saved severity instead (Decisive, Strong, Moderate or Minor).
01 · Investigation Brief
Investigation Brief
kr53.sogirl.so renders a single dark card headed "AV쏘걸" with the Korean line "접속 도메인 변경안내" (access domain change notice) and one pink button pointing to https://kr89.sogirl.so, another numbered subdomain of the same parent domain. There is no navigation, no product or price listing, no checkout, and no contact, terms or policy link anywhere on the page. Automated reads of the site were refused with HTTP 403, so the site's own pages could not be reviewed. Technical checks are clean — no Safe Browsing warning, a valid encrypted connection, and a hosting IP with no saved abuse reports — but those describe detections, not who runs the site. With the operator unverified and the destination unresolved, the score sits in the moderate-risk band.
One button, one destination, nothing else
The entire rendered page is a notice card. The only interactive element is a large pink button displaying the URL https://kr89.sogirl.so, which sends the visitor to a different numbered subdomain of the same registrable domain rather than to any shop, payment page or third-party merchant.
Small text under the button reads "※ 2026.09 업데이트" (updated 2026.09), presenting the redirect as a dated domain-change announcement. No navigation, product listings, prices, checkout, contact details, terms or policy links appear anywhere on the page.
Numbered subdomains that hand visitors off to the next number are the shape of a rotating access address rather than a stable, accountable service. What kr89.sogirl.so actually offers — content, subscription, payment — is not shown by anything in this review.
Clean technical checks, unverified operator
The browser threat feed returned no threat warning, the saved TLS check found a valid encrypted connection, and the hosting IP carries an abuse confidence score of 0/100 across 0 saved reports. Nothing in the technical layer suggests malware, phishing or a compromised host.
The operator side is a blank. The site answered automated requests with HTTP 403 on both the first attempt and the retry, so its own page, contact, About and policy text was never reviewed. No company name, contact channel, terms or refund policy is visible on the rendered notice either.
The parent domain sogirl.so has a multi-year registration history — first registered 2021-11-24 through NAMECHEAP INC, roughly 1808 days old — but that age belongs to the parent domain, not to this kr53 subdomain, and a status-monitoring listing for the host records no issues without vouching for the operator.
Why the score is 55
The score combines saved deterministic evidence with the grounded analysis available for this report.
02 · Security Evidence
Security evidence
Antivirus Engines
0/ 90
No detectionsSaved analysis from July 15, 2023 - stale
No detections across 69 engines that rated this URL
No antivirus engine that answered raised an adverse result; 21 had no rating for this URL. This is one signal, not a guarantee.
- Malicious
- 0
- Suspicious
- 0
- Total
- 90
All 90 engine results
- 0xSI_f33d - Unrated
- Abusix - Clean
- Acronis - Clean
- ADMINUSLabs - Clean
- AICC (MONITORAPP) - Clean
- AlienVault - Clean
- alphaMountain.ai - Clean
- AlphaSOC - Unrated
- Antiy-AVL - Clean
- ArcSight Threat Intelligence - Unrated
- Artists Against 419 - Clean
- AutoShun - Unrated
- Avira - Clean
- benkow.cc - Clean
- Bfore.Ai PreCrime - Clean
- BitDefender - Clean
- Bkav - Unrated
- BlockList - Clean
- Blueliv - Clean
- Certego - Clean
- Chong Lua Dao - Clean
- CINS Army - Clean
- Cluster25 - Unrated
- CMC Threat Intelligence - Clean
- CRDF - Clean
- Criminal IP - Unrated
- CrowdSec - Unrated
- Cyan - Unrated
- Cyble - Clean
- CyRadar - Clean
- desenmascara.me - Clean
- DNS8 - Clean
- Dr.Web - Clean
- EmergingThreats - Clean
- Emsisoft - Clean
- ESET - Clean
- ESTsecurity - Clean
- Feodo Tracker - Clean
- Forcepoint ThreatSeeker - Unrated
- Fortinet - Clean
- Fortra - Unrated
- G-Data - Clean
- Google Safe Browsing - Clean
- GreenSnow - Clean
- Heimdal Security - Clean
- IPsum - Clean
- Juniper Networks - Clean
- K7AntiVirus - Clean
- Kaspersky - Unrated
- Lionic - Clean
- Lumu - Unrated
- Malwared - Clean
- MalwarePatrol - Clean
- malwares.com URL checker - Clean
- Netcraft - Unrated
- OpenPhish - Clean
- PhishFort - Unrated
- Phishing Database - Clean
- Phishtank - Clean
- PREBYTES - Clean
- PrecisionSec - Unrated
- Quick Heal - Clean
- Quttera - Clean
- Rising - Clean
- SafeToOpen - Unrated
- Sangfor - Clean
- Scantitan - Clean
- SCUMWARE.org - Clean
- Seclookup - Clean
- SecureBrain - Clean
- securolytics - Clean
- Snort IP sample list - Clean
- SOCRadar - Unrated
- Sophos - Clean
- Spam404 - Clean
- StopForumSpam - Clean
- Sucuri SiteCheck - Clean
- ThreatHive - Clean
- Threatsourcing - Clean
- Trustwave - Clean
- URLhaus - Clean
- URLQuery - Unrated
- Viettel Threat Intelligence - Clean
- VIPRE - Unrated
- ViriBack - Clean
- VX Vault - Clean
- Webroot - Clean
- Xcitium Verdict Cloud - Unrated
- Yandex Safebrowsing - Clean
- ZeroCERT - Clean
How security vendors categorise this site
- Xcitium Verdict Cloudmedia sharing
Each vendor’s own label for the site, saved with the antivirus result. Labels are separate from the engine verdicts above and can disagree with each other.
Security Scans
Checked against the browser threat feeds available to this scan — no hit.
What we observed
Visual context from the captured page
A dark grey page shows a single centered dark card with a pink heading 'AV쏘걸' and Korean text '접속 도메인 변경안내' (access domain change notice). A large pink button displays the URL 'https://kr89.sogirl.so', directing visitors to a different numbered subdomain of the same parent domain. Small text below the button reads '※ 2026.09 업데이트' (updated 2026.09), indicating a dated domain-change notice. No navigation, product listings, prices, checkout, contact details, terms or policy links are visible anywhere on the rendered page.
What the captured page showed
4 observations- 01
A dark grey page shows a single centered dark card with a pink heading 'AV쏘걸' and Korean text '접속 도메인 변경안내' (access domain change notice).
- 02
A large pink button displays the URL 'https://kr89.sogirl.so', directing visitors to a different numbered subdomain of the same parent domain.
- 03
Small text below the button reads '※ 2026.09 업데이트' (updated 2026.09), indicating a dated domain-change notice.
- 04
No navigation, product listings, prices, checkout, contact details, terms or policy links are visible anywhere on the rendered page.
03 · Investigation Story
Investigation story
What the site claims
Independent evidence classifies the site as content, but the page's own claim could not be captured.
What we observed
The page itself could not be fully inspected, so the report relies on the other saved checks.
What independent research found
2 external findings were saved and compared with the page evidence.
What remains unverified
2 of the 6 applicable core capabilities did not complete, so those gaps remain visible in the coverage ledger.
What kind of site and risk is this?
Threat category
No threat category confirmed
Service and business model
Content
Observed behavior
Evidence behind this classification
- 01The parent domain sogirl.so was first registered on 2021-11-24 and is about 1808 days old; the subdomain's own age is not shown.
- 02The hosting IP has an abuse confidence score of 0/100 across 0 saved reports.
- 03The site refused automated reads with HTTP 403 on both attempts, so its page, contact, About and policy text was never reviewed.
If this is a scam — what it means for you
What happens when a visitor clicks through
A visitor arriving at kr53.sogirl.so sees only the notice and is pushed to press the single button, which moves them to kr89.sogirl.so — a sibling subdomain on the same parent domain, not an independently reviewed destination.
If this is a scam, how it works
The evidence-backed path
Each stage below is preserved from the grounded analysis and linked to saved evidence.
Because the site's own pages could not be read and the destination was not reviewed, a visitor has no way to check who is behind the service, what it costs, or what terms apply before continuing. That absence of accountability, not any detected malware, is the reason for the score.
Treat this page as an unverified redirect notice. Do not enter personal details, payment information or account credentials on kr89.sogirl.so or any other numbered subdomain of this domain until you can identify who operates it and what terms apply; if you only wanted the original site, close the tab rather than following the button.
Web research findings
Independent findings for kr53.sogirl.so, including public complaints, named review sources, registration records, and look-alike-domain evidence.
No independently sourced scam reports or credibility records were found for kr53.sogirl.so. That is common for new or low-traffic sites and does not clear the site.
Reputation Sources
How this domain rates across independent threat-intelligence and blocklist providers.
04 · Domain & Infrastructure
Domain & infrastructure
The plumbing behind the site — who registered it, how it’s encrypted, where it’s hosted, and where it links out. A valid certificate or a calm server doesn’t mean the business is honest — scam sites pass these checks too.
Infrastructure map
- Domainkr53.sogirl.so
- Redirects tokr53.sogirl.so
- Hosted byCloudflare, Inc.
Domain Timeline
- Nov 24, 2021Domain registered
First appeared in WHOIS records — 4 years old when this review was saved.
- Nov 6, 2026Saved security review — Rated Moderate Risk
The evidence in this saved scan is mixed or incomplete; the completed checks are detailed above.
Domain & Encryption
Certificate issued for sogirl.so.
A shared Cloudflare address answers for many sites, so it is not the site's own server and says nothing about who runs it.
Redirect Chain
The site refused our redirect check, so this chain may be incomplete.
- 1301http://kr53.sogirl.so/
- 2403https://kr53.sogirl.so/
Server Reputation
05 · Evidence Ledger
Evidence ledger
- Antiviruspartial
- Browser threat feedcomplete
- Page contentunavailable
- Analysiscomplete
- Visual evidencecomplete
The conclusion is supported by the evidence saved with this report.
Technical threat
unknownMalware, phishing, credential theft and hostile infrastructure.
No confirmed evidence in this dimension.
Operator / customer risk
unknownComplaints, withdrawals, business conduct and commercial traps.
The only call to action sends visitors from kr53.sogirl.so to kr89.sogirl.so, another numbered subdomain of the same parent domain. · The site refused automated reads with HTTP 403 on both attempts, so its page, contact, About and policy text was never reviewed.
Source coverage and freshness
Status shows whether usable evidence was saved; finding shows what that evidence observed.
| Source | Result | Completion | Finding | Freshness |
|---|---|---|---|---|
| Antivirus | 0 of 90 engines flagged | Limited | No saved finding | stale fallback · analysed Jul 15, 2023 |
| Browser protection | No browser threat-list match | Completed | No adverse finding | this scan · Nov 6, 2026 |
| Page content | Page content was not available for semantic review | Unavailable | No saved finding | Not available |
| Visual evidence | 4 visible observations saved with the page capture | Completed | No adverse finding | this scan · Nov 6, 2026 |
| Independent research | 2 independent findings were saved | Completed | No adverse finding | this scan · Nov 6, 2026 |
- Antivirus
- Result0 of 90 engines flagged
- CompletionLimitedFindingNo saved finding
- Freshnessstale fallback · analysed Jul 15, 2023
- Browser protection
- ResultNo browser threat-list match
- CompletionCompletedFindingNo adverse finding
- Freshnessthis scan · Nov 6, 2026
- Page content
- ResultPage content was not available for semantic review
- CompletionUnavailableFindingNo saved finding
- FreshnessNot available
- Visual evidence
- Result4 visible observations saved with the page capture
- CompletionCompletedFindingNo adverse finding
- Freshnessthis scan · Nov 6, 2026
- Independent research
- Result2 independent findings were saved
- CompletionCompletedFindingNo adverse finding
- Freshnessthis scan · Nov 6, 2026
07 · Safety FAQ
Safety FAQ
Answered from the saved verdict and evidence in this report.
Is kr53.sogirl.so a scam or is it safe?
Is kr53.sogirl.so safe to use?
Has kr53.sogirl.so been flagged by antivirus engines?
Is kr53.sogirl.so on any phishing or malware blacklists?
How old is the kr53.sogirl.so domain?
Does kr53.sogirl.so have a valid SSL certificate?
Where is kr53.sogirl.so hosted?
How often is the kr53.sogirl.so report updated?
08 · Final Verdict
Final verdict
A bare Korean "domain change notice" page that forwards visitors to another numbered subdomain, with no readable operator, contact or policy text
kr53.sogirl.so renders a single dark card headed "AV쏘걸" with the Korean line "접속 도메인 변경안내" (access domain change notice) and one pink button pointing to https://kr89.sogirl.so, another numbered subdomain of the same parent domain. There is no navigation, no product or price listing, no checkout, and no contact, terms or policy link anywhere on the page. Automated reads of the site were refused with HTTP 403, so the site's own pages could not be reviewed. Technical checks are clean — no Safe Browsing warning, a valid encrypted connection, and a hosting IP with no saved abuse reports — but those describe detections, not who runs the site. With the operator unverified and the destination unresolved, the score sits in the moderate-risk band.
09 · Community
Community
Are you the owner of kr53.sogirl.so?Verify and reply