Notification and current-status evidence
The sent-report ledger records the first outgoing report at .
The recorded recipient is abuse@dynadot.com.
The latest stored availability evidence still shows the domain reachable; 6 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
kinietq[.]xyz
“Kinetiq”
kinietq.xyz — असत्यापित. ब्रांड प्रतिरूपण: Across; घोटाले का प्रकार: Brand Impersonation. साक्ष्य सारांश: VirusTotal 4/91 (alphaMountain.ai, CRDF, Forcepoint ThreatSeeker, Gridinsoft); 3 external blocklist matches (MetaMask, ScamSniffer, SEAL); PhishDestroy score 74/100. रजिस्ट्रार: Dynadot.
मूल फॉरेंसिक रिकॉर्ड सुरक्षित रखने के लिए नीचे का विस्तृत PhishDestroy AI विश्लेषण अंग्रेज़ी में रखा गया है।
Analysis of kinietq.xyz confirms it as a brand-impersonation scam site targeting the Across protocol, operational since February 21, 2026. The domain was registered through Dynadot LLC and hosted on Cloudflare infrastructure (AS13335), resolving to IP 172.67.176.186 in the United States. No SSL certificate was detected, increasing exposure to interception risks. The page title 'Kinetiq' suggests an attempt to mimic legitimate services, though the exact content and functionality remain unconfirmed due to the site's current offline status. Infrastructure analysis reveals the use of Cloudflare nameservers (dayana.ns.cloudflare.com, elliot.ns.cloudflare.com) and multiple front-end technologies, including jsDelivr, cdnjs, crypto-js, and HTTP/3.
HSTS is enforced, which may complicate passive inspection but does not mitigate the underlying threat. The domain appears on four security blocklists, including PhishDestroy, MetaMask, ScamSniffer, and SEAL, and is flagged by 4 of 93 vendors in VirusTotal scans. Gridinsoft assigns a trust score of 0/100, reinforcing its malicious classification. Defenders should treat this domain as a confirmed threat vector for brand impersonation.
Blocklist enforcement is recommended at the DNS and network levels, particularly for organizations interacting with the Across ecosystem. Given the domain's offline status as of July 24, 2026, further forensic analysis may be limited, but historical logs should be reviewed for prior connections. No evidence of a phishing kit or specific payload is available, so monitoring for reactivation or related domains (e.g., typosquats, similar Cloudflare-hosted sites) is advised. The lack of SSL and reliance on Cloudflare infrastructure are consistent with low-effort scam operations, though the use of modern protocols like HTTP/3 suggests some technical sophistication.
धमकी प्रतिक्रिया पाइपलाइन
सार्वजनिक ब्लॉकलिस्ट स्थिति
सहेजा गया कैप्चर
डोमेन इंटेलिजेंस
तकनीकी विवरणडीएनएस, एसएसएल एसएएन, टाइमस्टैम्प
ICANN OVERSIGHT
प्रत्यायन और आरएए संदर्भ
प्रत्यायन और आरएए संदर्भ
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
तकनीकें · 6 identified
JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.
www.jsdelivr.com 100% विश्वासHTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.
www.rfc-editor.org 100% विश्वासCloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
www.cloudflare.com 100% विश्वासHTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.
httpwg.org 100% विश्वासवायरसटोटल विश्लेषण
संग्रहीत साक्ष्य
साक्ष्य और बाहरी रिपोर्टें
PD-20260202-CA6C1C Recipient: abuse@dynadot.com क्या आप इस साइट से प्रभावित हुए?
यदि आपने खाता क्रेडेंशियल, व्यक्तिगत या भुगतान जानकारी दर्ज की है, या इस डोमेन से कोई फ़ाइल डाउनलोड की है, तो तुरंत कार्रवाई करें। घटना की रिपोर्ट करने और अपनी सुरक्षा करने में आपकी सहायता के लिए नीचे संसाधन दिए गए हैं।
अपने स्थानीय अधिकारियों को रिपोर्ट करें
आधिकारिक साइबर अपराध संपर्क, या एक शिकायत ड्राफ्ट बनाएं → प्राप्त करने के लिए अपना देश चुनें।
किसी भी डोमेन की जाँच करें
संग्रहीत ब्लॉकलिस्ट, WHOIS, DNS और सार्वजनिक स्कैन साक्ष्य का उपयोग करके खतरे का विश्लेषण
अभी स्कैन करेंफ़िशिंग की रिपोर्ट करें
संदिग्ध डोमेन हमारे थ्रेट डेटाबेस में जमा करें — समुदाय की सुरक्षा करें
रिपोर्ट करेंसीधा खतरा फीड
हाल की फ़िशिंग रिपोर्टें और उपलब्धता में परिवर्तन देखे गए
निगरानी करेंजानकारी में रहें, सुरक्षित रहें
लाइव खतरों की निगरानी करें या यदि आपको लगता है कि यह एक गलत सकारात्मक है तो इस लिस्टिंग को चुनौती दें।