Notification and current-status evidence
The sent-report ledger records the first outgoing report at . A report was sent to the recorded registrar; contact details remain in Domain Intelligence. The latest stored availability evidence still shows the domain reachable; 5 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
kratuxilki[.]com
Résumé des preuves
This domain, kratuxilki.com, was registered on February 21, 2026 through Hosting Concepts B.V. d/b/a Registrar.eu and is currently hosted behind Cloudflare (AS13335). DNS resolution points to the IP address 188.114.96.3, which is attributed to a Cloudflare data center in the United States. The domain serves an HTTPS endpoint secured by a Let’s Encrypt certificate (E7) and advertises modern security features such as HTTP Strict Transport Security and HTTP/3, typical of Cloudflare‑protected sites. VirusTotal reports that seven out of ninety‑five scanning engines flag the domain, indicating a moderate level of malicious detection.
Complementary reputation services reinforce the concern: Gridinsoft assigns a trust score of zero out of one hundred, Google Safe Browsing classifies the URL as a social‑engineering threat, and the domain appears on three public blocklists. Additional blocking services, including PhishDestroy, MetaMask, and SEAL, have also listed the domain as hostile. The nameservers in use are cruz.ns.cloudflare.com and peter.ns.cloudflare.com, confirming the Cloudflare front‑end.
As of the report date, the domain is marked offline, but the historical indicators suggest it was employed in a generic phishing campaign. Defenders should continue to block traffic to 188.114.96.3, monitor for any re‑activation of the domain, and add kratuxilki.com to internal URL filtering rules. Because the site is no longer live, forensic collection is limited to DNS, certificate, and third‑party detection data; further investigation would require obtaining any archived content from web caches if available.
Instantané des preuves transmises
- Envoyé
- Entrées du registre
- 1
- ID du dossier
PD-20260219-632E3C- Artefact PDF
- Preuve PDF
Texte intégral des preuves
Acceptable Use Policy: The domain kratuxilki.com is engaged in phishing activities, which constitutes a clear violation of your AUP prohibiting illegal activities and fraud.
Terms of Service: The ongoing use of this domain for deceptive practices violates your TOS, which reserves the right to suspend or terminate services for such violations.
Applicable Laws (GB):
Computer Misuse Act 1990 - This law criminalizes unauthorized access to computer systems, including phishing schemes designed to deceive individuals into providing personal information.
Fraud Act 2006 - This act makes it an offense to commit fraud by false representation, which is precisely what phishing entails.
Regulation (EU) 2016/679 (General Data Protection Regulation) - Phishing activities often involve the unlawful processing of personal data, which is a violation of GDPR principles.
Regulatory Note: Failure to take immediate action against this domain may result in regulatory scrutiny and potential liability under applicable laws. It is imperative to act swiftly to mitigate risks associated with non-compliance.
Data Coverage
Processus de réponse aux menaces Pipeline
Couverture des listes de blocage
10 sources externes surveillées · instantané du 12/08/2026
8 sources externes surveillées Aucune correspondance
Chronologie de détection
-
État du domaine
Accessible → Inaccessible
-
Cloudflare Radar
Analyse Cloudflare Radar enregistrée · Ouvrir l’analyse
-
État du domaine
Inaccessible → Accessible
Capture enregistrée
Informations sur les domaines
Détails techniquesDNS, noms TLS et horodatages
ICANN OVERSIGHT
Contexte de l’accréditation et du RAA
Contexte de l’accréditation et du RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Analyse VirusTotal
Ce site vous a-t-il affecté ?
Si vous avez saisi des informations d'identification de compte, des informations personnelles ou de paiement, ou téléchargé un fichier à partir de ce domaine, agissez immédiatement. Vous trouverez ci-dessous des ressources pour vous aider à signaler l'incident et à vous protéger.
Signalez-le à vos autorités locales
Sélectionnez votre pays pour obtenir contacts officiels en matière de cybercriminalité ou créer un projet de plainte →.
Vérifier n'importe quel domaine
Analyse des menaces à l'aide de listes de blocage stockées, de WHOIS, de DNS et de preuves d'analyse publique
Scanner maintenantSignaler une tentative d'hameçonnage
Signalez les domaines suspects à notre base de données des menaces — protégez la communauté
SignalerFlux d'alertes en temps réel
Rapports de phishing récents et changements de disponibilité observés
SurveillerRestez informés, restez en sécurité
Surveillez les menaces en temps réel ou signalez cette alerte si vous pensez qu'il s'agit d'un faux positif