kntara[.]click
“Yüzyılın Konut Projesi”
Résumé des preuves
This domain, kntara.click, was observed hosting a page titled “Yüzyılın Konut Projesi”. The site was registered on December 01, 2025 through Global Domain Group LLC and is hosted on Cloudflare infrastructure, resolving to IP address 104.26.8.23 which belongs to AS13335 (Cloudflare, Inc.) in the United States. The authoritative nameservers for the zone are dahlia.ns.cloudflare.com and sterling.ns.cloudflare.com, confirming the use of Cloudflare's DNS service. No TLS certificate is presented, indicating the site was served over plain HTTP at the time of analysis. The domain received a Gridinsoft trust score of 0 out of 100, reflecting a severe lack of reputational confidence.
Threat intelligence sources list the domain on a single security blocklist and it is explicitly blocked by the PhishDestroy service. AlienVault OTX references the domain in sixteen separate threat‑intelligence pulses, and VirusTotal recorded detections from nineteen of ninety‑five scanning engines, reinforcing the malicious classification. The domain’s current HTTP status is offline, which may indicate takedown by the hosting provider or temporary removal by the operators. Because the site does not present an SSL certificate, any credentials submitted would have been transmitted unencrypted, a common characteristic of low‑skill phishing campaigns.
The presence on a single public blocklist, together with the PhishDestroy block, suggests that at least one anti‑phishing consortium has catalogued the site, but broader ecosystem awareness may still be limited. The sixteen OTX pulses provide historical context that the domain has been active in malicious campaigns for several months. Defenders should add kntara.click to network‑level deny lists, enforce DNS‑based blocking, and monitor for any resurgence of the domain or related Cloudflare‑hosted IPs.
Data Coverage
Processus de réponse aux menaces Pipeline
Couverture des listes de blocage
10 sources externes surveillées · instantané du 11/08/2026
10 sources externes surveillées Aucune correspondance
Chronologie de détection
-
Cloudflare Radar
Analyse Cloudflare Radar enregistrée · Ouvrir l’analyse
Capture enregistrée
Informations sur les domaines
Détails techniquesDNS, noms TLS et horodatages
ICANN OVERSIGHT
Contexte de l’accréditation et du RAA
Contexte de l’accréditation et du RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Analyse VirusTotal
Ce site vous a-t-il affecté ?
Si vous avez saisi des informations d'identification de compte, des informations personnelles ou de paiement, ou téléchargé un fichier à partir de ce domaine, agissez immédiatement. Vous trouverez ci-dessous des ressources pour vous aider à signaler l'incident et à vous protéger.
Signalez-le à vos autorités locales
Sélectionnez votre pays pour obtenir contacts officiels en matière de cybercriminalité ou créer un projet de plainte →.
Vérifier n'importe quel domaine
Analyse des menaces à l'aide de listes de blocage stockées, de WHOIS, de DNS et de preuves d'analyse publique
Scanner maintenantSignaler une tentative d'hameçonnage
Signalez les domaines suspects à notre base de données des menaces — protégez la communauté
SignalerFlux d'alertes en temps réel
Rapports de phishing récents et changements de disponibilité observés
SurveillerRestez informés, restez en sécurité
Surveillez les menaces en temps réel ou signalez cette alerte si vous pensez qu'il s'agit d'un faux positif