Notification and current-status evidence
The sent-report ledger records the first outgoing report at . A report was sent to the recorded registrar; contact details remain in Domain Intelligence. The latest stored availability evidence still shows the domain reachable; 5 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
kinhelp[.]top
“The United States Social Security Administration | SSA”
साक्ष्य सारांश
Analysis of kinhelp.top indicates a confirmed phishing domain targeting the United States Social Security Administration (SSA), as evidenced by its page title 'The United States Social Security Administration | SSA'. The domain was registered on March 11, 2026, through Cosmotown and is currently offline. Infrastructure analysis reveals it resolves to IP 192.142.54.88, hosted on AS214036 (Ultahost, Inc.) in the Netherlands. Nameservers ns1.hostcreed.com and ns2.hostcreed.com are associated with the domain, and it uses a Let's Encrypt SSL certificate (R13).
Technologies detected include LiteSpeed and HTTP/3. The domain appears on one security blocklist and is blocked by PhishDestroy. Two of 95 security vendors on VirusTotal flagged kinhelp.top as malicious. MX records point to the domain itself ([{"priority": 0, "host": "kinhelp.top"}]), a configuration often observed in phishing infrastructure to facilitate credential-harvesting emails.
No additional brand-specific indicators or scam kit details are present in the available data. Defenders should treat this domain as a confirmed SSA-themed phishing threat, particularly in email and web filtering rules. The offline status as of July 22, 2026, suggests takedown action, but monitoring for reactivation is recommended given the domain's recent registration and detected malicious activity.
भेजे गए प्रमाण का स्नैपशॉट
- भेजा गया
- लेज़र रिकॉर्ड
- 1
- केस आईडी
PD-20260311-BAB83F- कैप्चर किए गए पेज का शीर्षक
- The United States Social Security Administration | SSA
- PDF दस्तावेज़
- PDF प्रमाण
कानूनी आधार
प्रमाण का पूरा पाठ
Illegal Activities: Active phishing operation targeting victims
Fraud & Deception: Impersonation of legitimate services
Identity Theft: Collection of credentials under false pretenses
Applicable Laws (Unknown):
International Anti-Cybercrime Regulations
Budapest Convention on Cybercrime
Universal Fraud Prevention Laws
Phishing activities violate international cybercrime conventions and Unknown's domestic fraud laws.
Action Required: This evidence-backed report demonstrates clear violations requiring suspension per your policies. Continued hosting exposes your organization to regulatory scrutiny and potential legal liability.
Data Coverage
नेटवर्क सुरक्षा इंटेलिजेंस
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| YARAhub by abuse.ch | kinhelp.top/ |
malware | Detects file containing Telegram Bot API |
| YARAhub by abuse.ch | ultra.mediafire.com/2289;rbxriiv7nj8gwazkp7dfvwgs1dpatgqswek2dqkmonkvwx_ionigysntkspjqzbthjlgb14my7khcvlgmxj6opphi9iarjmaocauuasmsad5htrfxki1qik-v4kmvjptkb3repjzqwpq3e0qhpmam2p9ma9fzg1d5qgso871opm9udp2l1xbm2s8cx3rot5izx_l-a/1npfm88d75kb4xx/ssa_e-file.vb |
malware | Detect files disabling or modifying Windows Defender, Windows Firewall, or Microsoft Smartscreen |
| DigiCert UltraDNS | www.mediafire.com |
malicious | Sinkholed |
| DNS4EU | kinhelp.top |
malicious | Sinkholed |
| DigiCert UltraDNS | ultra.mediafire.com |
malicious | Sinkholed |
| DNS4EU | ultra.mediafire.com |
malicious | Sinkholed |
धमकी प्रतिक्रिया पाइपलाइन
ब्लॉकलिस्ट कवरेज
10 निगरानी वाले बाहरी स्रोत · संग्रहीत स्नैपशॉट 11/08/2026
सहेजा गया कैप्चर
डोमेन इंटेलिजेंस
तकनीकी विवरणDNS, TLS नाम और समय-मुद्राएँ
ICANN OVERSIGHT
प्रत्यायन और आरएए संदर्भ
प्रत्यायन और आरएए संदर्भ
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
वायरसटोटल विश्लेषण
साइट प्रदर्शन विश्लेषण
Google PageSpeed Insights — mobile performance audit of kinhelp.top · checked Mar 11, 2026
क्या आप इस साइट से प्रभावित हुए?
यदि आपने खाता क्रेडेंशियल, व्यक्तिगत या भुगतान जानकारी दर्ज की है, या इस डोमेन से कोई फ़ाइल डाउनलोड की है, तो तुरंत कार्रवाई करें। घटना की रिपोर्ट करने और अपनी सुरक्षा करने में आपकी सहायता के लिए नीचे संसाधन दिए गए हैं।
अपने स्थानीय अधिकारियों को रिपोर्ट करें
आधिकारिक साइबर अपराध संपर्क, या एक शिकायत ड्राफ्ट बनाएं → प्राप्त करने के लिए अपना देश चुनें।
किसी भी डोमेन की जाँच करें
संग्रहीत ब्लॉकलिस्ट, WHOIS, DNS और सार्वजनिक स्कैन साक्ष्य का उपयोग करके खतरे का विश्लेषण
अभी स्कैन करेंफ़िशिंग की रिपोर्ट करें
संदिग्ध डोमेन हमारे थ्रेट डेटाबेस में जमा करें — समुदाय की सुरक्षा करें
रिपोर्ट करेंसीधा खतरा फीड
हाल की फ़िशिंग रिपोर्टें और उपलब्धता में परिवर्तन देखे गए
निगरानी करेंजानकारी में रहें, सुरक्षित रहें
लाइव खतरों की निगरानी करें या यदि आपको लगता है कि यह एक गलत सकारात्मक है तो इस लिस्टिंग को चुनौती दें।