# PhishDestroy domain threat record: kn.kaykyr.com Content language: English Canonical HTML report: https://phishdestroy.io/domain/kn.kaykyr.com/ Machine-readable companion: https://phishdestroy.io/domain/kn.kaykyr.com/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: observed active - First observed by PhishDestroy: 2026-10-22 13:00:50 UTC - Last availability or vendor check: 2026-10-22 13:00:50 UTC - Stored record updated: 2026-10-22 19:15:56 UTC - VirusTotal detections in the stored snapshot: 10/92 - Independent public blocklist matches in the stored snapshot: 0 - Google Safe Browsing stored result: no stored flag ## Stored infrastructure - Observed IP address: 50.6.241.177 - Registrar in stored WHOIS data: IONOS SE - Registrar country in stored WHOIS data: DE - Last stored HTTP status: 200 - Registration date (registry RDAP, kaykyr.com): 2026-06-25 18:27:18 UTC ## Evidence links - URLScan report: https://urlscan.io/result/01a163b2-470d-7621-9d16-ad87c05e222c/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/kn.kaykyr.com - Certificate Transparency search: https://crt.sh/?q=%25.kn.kaykyr.com - Web Archive lookup: https://web.archive.org/web/*/https://kn.kaykyr.com/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Stored page captures - Primary capture: https://i.ibb.co/KzGj7hSL/af3ee15e1496.png Captured: 2026-10-22 13:00:50 UTC - URLScan capture 1: https://screenshots.phishdestroy.io/01a163b2-470d-7621-9d16-ad87c05e222c.png Captured: 2026-10-22 13:00:50 UTC Source report: https://urlscan.io/result/01a163b2-470d-7621-9d16-ad87c05e222c/ - URLScan capture 2: https://urlscan.io/screenshots/01a161e0-81a7-732b-8ec1-f7f8b3f65f05.png Captured: 2026-10-22 12:58:10 UTC Source report: https://urlscan.io/result/01a163b2-470d-7621-9d16-ad87c05e222c/ - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/21cb3931-62c0-4d81-91c5-79c4a333281f.png Captured: 2026-10-22 13:36:42 UTC Source report: https://radar.cloudflare.com/scan/21cb3931-62c0-4d81-91c5-79c4a333281f SHA-256: f831dbcd109473a199b230e8e49c45cf64cbfabccac38adaf6745edc4c4ea656 - URLQuery: https://screenshots.phishdestroy.io/uq/23641d2d-9c86-491a-93a8-f9145a22f422.png Source report: https://urlquery.net/report/23641d2d-9c86-491a-93a8-f9145a22f422 SHA-256: 591c2977a6ef458273f2d98fb242a6afe6e5f34e2feff8df24e1ed1a38e4a570 - URLScan · 2026-10-22: https://screenshots.phishdestroy.io/us/01a16121-cbac-7552-a41f-867d2ba0a6f2.png Captured: 2026-10-22 01:02:54 UTC Source report: https://urlscan.io/result/01a16121-cbac-7552-a41f-867d2ba0a6f2/ SHA-256: 2e64f31f6ff146a01be977061a740f6df23821e22ef91e9ca552f2e5c92ee108 - URLScan · 2026-10-22: https://screenshots.phishdestroy.io/us/01a1617b-2e45-746b-8dbb-72ec76645cdc.png Captured: 2026-10-22 02:40:45 UTC Source report: https://urlscan.io/result/01a1617b-2e45-746b-8dbb-72ec76645cdc/ SHA-256: 2e64f31f6ff146a01be977061a740f6df23821e22ef91e9ca552f2e5c92ee108 - URLScan · 2026-10-22: https://screenshots.phishdestroy.io/us/01a163b4-b311-7148-b18e-2674326cc26a.png Captured: 2026-10-22 13:02:41 UTC Source report: https://urlscan.io/result/01a163b4-b311-7148-b18e-2674326cc26a/ SHA-256: b7c809eb2351647488932a7e8cf572e1fe482c4c00abb62ada4a0fee0ed0f536 ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-10-22T13:03:29Z", "uuid": "01a163b2-470d-7621-9d16-ad87c05e222c", "scanned_at": "2026-10-22T12:59:57Z", "final_url": "https://kn.kaykyr.com/zcwKaMssDubqzozzdajXsjZ7PhSPIAKh/", "status": 200, "redirected": "same-domain", "redirects": [ { "to": "https://kn.kaykyr.com/zcwKaMssDubqzozzdajXsjZ7PhSPIAKh", "from": "http://kn.kaykyr.com/zcwKaMssDubqzozzdajXsjZ7PhSPIAKh", "status": 307 }, { "to": "https://kn.kaykyr.com/zcwKaMssDubqzozzdajXsjZ7PhSPIAKh/", "from": "https://kn.kaykyr.com/zcwKaMssDubqzozzdajXsjZ7PhSPIAKh", "status": 301 } ], "ip": "50.6.241.177", "ptr": "server.nuvhte.com", "domains": [ "unpkg.com", "ajax.googleapis.com" ], "ips": [ "104.18.1.22", "192.178.183.95", "50.6.241.177" ], "asns": [ "13335", "15169", "31898" ], "countries": [ "US", "CA" ], "doc_hash": "35e5631c1d8571fe871a24e98d88d7756c5c5a3790052d0d1af2158a86222b78", "globals": [ "$", "jQuery", "setImmediate", "clearImmediate", "swal", "sweetAlert" ], "tls": { "san": [ "*.kn.kaykyr.com", "kn.kaykyr.com" ], "cipher": "AES_128_GCM", "issuer": "YR2", "subject": "kn.kaykyr.com", "protocol": "TLS 1.3", "valid_to": "2027-01-02T03:12:08Z", "valid_from": "2026-10-04T03:12:09Z" }, "domain_age_days": 17, "apex_age_days": 117, "tls_age_days": 18, "tls_valid_days": 89, "requests": 9, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 99, "malicious": true }, "overall": { "tags": [ "phishing" ], "score": 100, "brands": [ "bt" ], "malicious": true, "categories": [ "phishing" ] }, "urlscan": { "tags": [ "phishing" ], "score": 100, "brands": [ "BT" ], "malicious": true, "categories": [ "phishing" ] } }, "headers": { "server": "Apache", "content-type": "text/html; charset=UTF-8" } }, "cf": { "v": 1, "fetched_at": "2026-10-22T13:39:51Z", "uuid": "21cb3931-62c0-4d81-91c5-79c4a333281f", "scanned_at": "2026-10-22T13:36:42Z", "final_url": "https://kn.kaykyr.com/", "status": 200, "history": [ { "url": "https://kn.kaykyr.com/", "status": 200 } ], "dom_hash": "27e3c315292eb89220d0e848113ec9ec61af999e43f7b30a57ef11840e8aa249", "doc_hash": "bd0e0f7d6f9d39c0fc8e71b216931d112a2714cff2a9cdab13684e28bf9aee45", "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "kn.kaykyr.com", "type": "A", "value": "50.6.241.177" } ], "dnssec_valid": false, "ip": "50.6.241.177", "whois": { "registrar": "IONOS SE", "created": "2026-06-25T18:27:18Z", "updated": "2026-07-13T03:24:11Z", "expires": "2027-06-25T18:27:18Z", "nameservers": [ "ns1.bta3nixosmall.shop", "ns2.bta3nixosmall.shop" ] } }, "vt": { "v": 1, "fetched_at": "2026-10-22T19:15:38Z", "analysis_at": "2026-10-22T10:26:12Z", "stats": { "timeout": 0, "harmless": 46, "malicious": 7, "suspicious": 3, "undetected": 36 }, "detections": { "CRDF": "malicious", "DNS8": "suspicious", "G-Data": "phishing", "Sophos": "phishing", "Webroot": "malicious", "Fortinet": "spam", "SOCRadar": "phishing", "Kaspersky": "phishing", "BitDefender": "phishing", "alphaMountain.ai": "spam" }, "reputation": 0, "registrar": "IONOS SE", "created": "2026-06-25T18:27:18Z", "expires": "2027-06-25T18:27:18Z", "updated": "2026-07-13T03:24:11Z", "first_seen": "2026-10-04T05:24:26Z", "dns": [ { "ttl": 21600, "type": "SOA", "rname": "root.50-6-241-177.cprapid.com", "value": "ns1.bta3nixosmall.shop" }, { "ttl": 21600, "type": "NS", "value": "ns1.bta3nixosmall.shop" }, { "ttl": 14400, "type": "MX", "value": "kn.kaykyr.com", "priority": 0 }, { "ttl": 14400, "type": "A", "value": "50.6.241.177" }, { "ttl": 14400, "type": "TXT", "value": "v=spf1 ip4:50.6.241.177 +a +mx +ip4:217.160.143.80 ~all" }, { "ttl": 21600, "type": "NS", "value": "ns2.bta3nixosmall.shop" } ], "dns_at": "2026-10-22T10:26:26Z", "jarm": "15d3fd16d29d29d00042d43d0000001ae0802418786940cae38f1d9eed5b9b", "cert": { "san": [ "*.kn.kaykyr.com", "kn.kaykyr.com" ], "issuer": "Let's Encrypt / YR2", "serial": "61e6c82725337d0f6e9f452eea249a8fe5f", "sha256": "74d8708bd7f6a87b93b221a569c886c74ee424362b6224f0055264ae0bb4cda5", "subject": "kn.kaykyr.com", "valid_to": "2027-01-02T03:12:08Z", "valid_from": "2026-10-04T03:12:09Z" }, "whois": { "registrar": "IONOS SE", "registrar_iana_id": "83", "registrar_url": "http://www.ionos.com", "created": "2026-06-25T18:27:18Z", "updated": "2026-07-13T03:24:11Z", "expires": "2027-06-25T18:27:18Z", "status": [ "clientTransferProhibited" ], "nameservers": [ "ns1.bta3nixosmall.shop", "ns2.bta3nixosmall.shop" ], "dnssec": "Unsigned" } }, "webcheck": { "v": 1, "fetched_at": "2026-10-22T13:40:05Z", "mail_config": { "mx": [ "kn.kaykyr.com" ], "spf": "v=spf1 ip4:50.6.241.177 +a +mx +ip4:217.160.143.80 ~all", "dkim": [ "default" ], "dmarc": true, "dkim_bits": 2048, "spf_lookups": 2 }, "caa_records": { "domain": "kn.kaykyr.com" }, "block_lists": { "resolvers": 12, "blocked_count": 0 }, "archives": { "last": "2026-10-22T13:00:23Z", "first": "2026-10-22T13:00:23Z", "changes": 0, "days_archived": 1, "avg_page_bytes": 2435 }, "social_tags": { "title": "Index of /" }, "trackers": { "requests": 1 }, "mixed_content": { "third_party_scripts": 0 }, "status": { "up": true, "code": 200, "timings": { "dns": 2, "tls": 129, "wait": 133, "connect": 124, "download": 0 }, "response_ms": 388 }, "tls_connection": { "alpn": "http/1.1", "cipher": "TLS_AES_256_GCM_SHA384", "protocol": "TLSv1.3", "versions": [ "TLSv1.2", "TLSv1.3" ], "authorized": true, "forward_secrecy": true }, "ports": { "open": [ 22, 25, 53, 80, 110, 143, 443, 587, 993, 995, 3306 ] }, "carbon": { "bytes": 11039, "co2_grams": 0.0004, "cleaner_than": 70 }, "dns_server": { "ns": [ { "ip": "50.6.241.177", "host": "ns2.bta3nixosmall.shop" }, { "ip": "50.6.241.177", "host": "ns1.bta3nixosmall.shop" } ], "zone": "kn.kaykyr.com" }, "location": { "ip": "50.6.241.177", "asn": "31898", "org": "Oracle Corporation", "city": "Toronto", "country": "CA" }, "ssl": { "issuer": "Let's Encrypt / YR2", "subject": "kn.kaykyr.com" }, "dns": { "A": [ "50.6.241.177" ], "MX": [ "{\"exchange\": \"kn.kaykyr.com\", \"priority\": 0}" ], "NS": [ "ns2.bta3nixosmall.shop", "ns1.bta3nixosmall.shop" ], "SOA": "{\"nsname\": \"ns1.bta3nixosmall.shop\", \"hostmaster\": \"root.50-6-241-177.cprapid.com\", \"serial\": 2026101305, \"refresh\": 3600, \"retry\": 1800, \"expire\": 1209600, \"minttl\": 86400}", "TXT": [ "v=spf1 ip4:50.6.241.177 +a +mx +ip4:217.160.143.80 ~all" ] }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "hsts": { "message": "Site does not serve any HSTS headers." }, "http_security": { "xFrameOptions": false, "referrerPolicy": false, "xXSSProtection": false, "permissionsPolicy": false, "xContentTypeOptions": false, "contentSecurityPolicy": false, "strictTransportPolicy": false, "crossOriginOpenerPolicy": false, "crossOriginEmbedderPolicy": false, "crossOriginResourcePolicy": false }, "get_ip": { "ip": "50.6.241.177", "family": 4 }, "redirects": { "chain": [ "https://kn.kaykyr.com" ] }, "subdomains": { "count": 31, "subdomains": [ "bd.kaykyr.com", "bx.kaykyr.com", "by.kaykyr.com", "cd.kaykyr.com", "cu.kaykyr.com", "du.kaykyr.com", "eh.kaykyr.com", "et.kaykyr.com", "fl.kaykyr.com", "fm.kaykyr.com", "gh.kaykyr.com", "hg.kaykyr.com", "hq.kaykyr.com", "iu.kaykyr.com", "iv.kaykyr.com", "jn.kaykyr.com", "kn.kaykyr.com", "ma.kaykyr.com", "mg.kaykyr.com", "oa.kaykyr.com", "ok.kaykyr.com", "oy.kaykyr.com", "qp.kaykyr.com", "ui.kaykyr.com", "vo.kaykyr.com", "wc.kaykyr.com", "wo.kaykyr.com", "ws.kaykyr.com", "wv.kaykyr.com", "zk.kaykyr.com", "zo.kaykyr.com" ] }, "tech_stack": { "technologies": [ "Apache HTTP Server" ] }, "linked_pages": { "internal_count": 56 }, "whois": { "registrar": "IONOS SE", "created": "2026-06-25T18:27:18Z", "updated": "2026-07-13T03:24:11Z", "expires": "2027-06-25T18:27:18Z", "status": [ "clientTransferProhibited https://icann.org/epp" ], "nameservers": [ "ns1.bta3nixosmall.shop", "ns2.bta3nixosmall.shop" ] }, "headers": { "headers": { "server": "Apache", "content-type": "text/html;charset=ISO-8859-1" } } } } ```