VirusTotal
13 / 95 engine detections
रिपोर्ट खोलें“Your country blocked”
फ़िशिंग: klte.foundation — असत्यापित. साक्ष्य सारांश: VirusTotal 13/95 (ChainPatrol, alphaMountain.ai, BitDefender, CRDF, CyRadar); Spamhaus DBL_PHISH…
मूल फॉरेंसिक रिकॉर्ड सुरक्षित रखने के लिए नीचे का विस्तृत PhishDestroy AI विश्लेषण अंग्रेज़ी में रखा गया है।
13 / 95 engine detections
रिपोर्ट खोलेंDBL_PHISH
11 community references
रिपोर्ट खोलेंprovider verdict: clean
रिपोर्ट खोलेंNo threat flag
रिपोर्ट खोलेंNo malicious flag
रिपोर्ट खोलेंResults reflect each source’s collection time. Zero detections do not guarantee safety. OTX references are community publications.
PhishDestroy threat report
The domain klte.foundation was registered through NiceNIC International Group Co., Limited and first observed on October 29, 2025. It resolves to the Cloudflare‑owned address 188.114.97.3, hosted under ASN 13335 (Cloudflare, Inc.) in the United States. The authoritative name servers are merlin.ns.cloudflare.com and riya.ns.cloudflare.com, indicating the use of Cloudflare’s DNS service. No TLS certificate is presented for the site, meaning traffic is served without encryption.
The only visible page title returned from the HTTP response is "Your country blocked," which aligns with the classified scam type of Account Takeover. Threat intelligence platforms have flagged the domain: 13 of 95 VirusTotal‑registered security vendors have generated detections, and the domain appears on a single external blocklist. Independent monitoring by PhishDestroy also lists the domain as blocked. Gridinsoft assigns a trust score of 0 out of 100, reinforcing the malicious assessment.
Current infrastructure status shows the site taken offline, which may be temporary or a takedown action. For defenders, the evidence suggests that klte.foundation should be added to internal block lists, DNS filtering rules, and endpoint protection signatures. Monitoring of the associated IP 188.114.97.3 for any re‑use in future campaigns is advisable, as Cloudflare services are frequently leveraged for fast‑flux style phishing operations. Continuous re‑evaluation of the domain’s status on public blocklists and VirusTotal detections is recommended to capture any changes in activity.
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
एज-आईपी प्रतिष्ठा इस डोमेन के लिए जिम्मेदार नहीं है।
merlin.ns.cloudflare.comriya.ns.cloudflare.comLocation describes the IP network.
An estimated time describes an observation window. It does not prove a registrar action or the exact moment a site became unavailable.
Compare what a browser and a crawler receive, and check for Keitaro traffic routing.
unavailable: raw=connection_error; http=0; via=http_proxy; error=SOCKSHTTPConnectionPool(host='klte.foundation', port=80): Max retries exceeded with url: / (Caused by NewConnectionError
klte.foundation
Dated changes retained by the monitor and source collectors. Newest observations appear first; source states are not proof of a takedown.
held→dns_inactive
dns_nxdomain
अज्ञात→held
registrar_client_hold · NICENIC INTERNATIONAL GROUP CO., LIMITED · client_hold
held→dns_inactive
dns_nxdomain
अज्ञात→held
registrar_client_hold · NICENIC INTERNATIONAL GROUP CO., LIMITED · client_hold
held→dns_inactive
dns_nxdomain
अज्ञात→held
registrar_client_hold · NICENIC INTERNATIONAL GROUP CO., LIMITED · client_hold
अज्ञात→held
registrar_client_hold · NICENIC INTERNATIONAL GROUP CO., LIMITED · client_hold
अज्ञात→dns_inactive
dns_nxdomain
अज्ञात→held
registrar_client_hold · NICENIC INTERNATIONAL GROUP CO., LIMITED · client_hold
अज्ञात→dns_inactive
dns_nxdomain
अज्ञात→held
registrar_client_hold · NICENIC INTERNATIONAL GROUP CO., LIMITED · client_hold
अज्ञात→dns_inactive
dns_nxdomain
अज्ञात→held
registrar_client_hold · NICENIC INTERNATIONAL GROUP CO., LIMITED · client_hold
अज्ञात→dns_inactive
dns_nxdomain
अज्ञात→dns_inactive
dns_nxdomain
अज्ञात→held
registrar_client_hold · NICENIC INTERNATIONAL GROUP CO., LIMITED · client_hold
अज्ञात→dns_inactive
dns_nxdomain
अज्ञात→held
registrar_client_hold · NICENIC INTERNATIONAL GROUP CO., LIMITED · client_hold
अज्ञात→dns_inactive
dns_nxdomain
अज्ञात→held
registrar_client_hold · NICENIC INTERNATIONAL GROUP CO., LIMITED · client_hold
अज्ञात→dns_inactive
dns_nxdomain
अज्ञात→held
registrar_client_hold · NICENIC INTERNATIONAL GROUP CO., LIMITED · client_hold
अज्ञात→dns_inactive
dns_nxdomain
अज्ञात→held
registrar_client_hold · NICENIC INTERNATIONAL GROUP CO., LIMITED · client_hold
अज्ञात→dns_inactive
dns_nxdomain
अज्ञात→held
registrar_client_hold · NICENIC INTERNATIONAL GROUP CO., LIMITED · client_hold
held→dns_inactive
dns_nxdomain
dns_inactive→held
registrar_client_hold · NICENIC INTERNATIONAL GROUP CO., LIMITED · client_hold
held→dns_inactive
dns_nxdomain
dns_inactive→held
registrar_client_hold · NICENIC INTERNATIONAL GROUP CO., LIMITED · client_hold
अज्ञात→dns_inactive
dns_nxdomain
अज्ञात→held
registrar_client_hold · NICENIC INTERNATIONAL GROUP CO., LIMITED · client_hold
अज्ञात→dns_inactive
dns_nxdomain
अज्ञात→held
registrar_client_hold · NICENIC INTERNATIONAL GROUP CO., LIMITED · client_hold
held→dns_inactive
dns_nxdomain
अज्ञात→held
registrar_client_hold · NICENIC INTERNATIONAL GROUP CO., LIMITED · client_hold
https://radar.cloudflare.com/scan/1853f303-f1f7-4fa2-9a8c-15c9358c4f3e
11 community references
View sourceNo threat flag
View sourcePage captured
View source13/95 engine detections
View sourceklte.foundation
View source1 समुदाय सदस्य ने रिपोर्ट किया; पहली बार 03/11/2025 को देखा गया
Listed domains receive at least one abuse report; this entry has no retained notification history.
यदि आपने खाता क्रेडेंशियल, व्यक्तिगत या भुगतान जानकारी दर्ज की है, या इस डोमेन से कोई फ़ाइल डाउनलोड की है, तो तुरंत कार्रवाई करें। घटना की रिपोर्ट करने और अपनी सुरक्षा करने में आपकी सहायता के लिए नीचे संसाधन दिए गए हैं।
आधिकारिक साइबर अपराध संपर्क, या एक शिकायत ड्राफ्ट बनाएं → प्राप्त करने के लिए अपना देश चुनें।
Template-based draft · optional AI wording assistance requires separate consent
Choose the steps that match what you shared. Keep a copy of this report alongside your own records.
Stop using the suspicious site. Open the real service through its official app or an address you already trust.
Keep original emails, receipts, messages and screenshots in a secure place. A factual timeline helps the receiving authority understand what happened. IC3 evidence guidance ↗
klte.foundation)भले ही आपके पास सभी विवरण न हों — फिर भी रिपोर्ट दर्ज करें. आंशिक जानकारी अभी भी जांच में मदद करती है।
A report is not a guarantee of recovery or investigation, but prompt, accurate transaction data can help authorities and service providers trace the incident.
Further guidance: NIST · phishing responseFBI IC3 · reports & evidenceFTC · recovery scams
संग्रहीत ब्लॉकलिस्ट, WHOIS, DNS और सार्वजनिक स्कैन साक्ष्य का उपयोग करके खतरे का विश्लेषण
अभी स्कैन करेंसंदिग्ध डोमेन हमारे थ्रेट डेटाबेस में जमा करें — समुदाय की सुरक्षा करें
रिपोर्ट करेंहाल की फ़िशिंग रिपोर्टें और उपलब्धता में परिवर्तन देखे गए
निगरानी करेंलाइव खतरों की निगरानी करें या यदि आपको लगता है कि यह एक गलत सकारात्मक है तो इस लिस्टिंग को चुनौती दें।
This report combines saved page captures, registration and network records, scanner results and PhishDestroy reporting history. Each source keeps its own observation date. Open a source report to inspect the original result.
The AI-assisted analysis was written on . It describes the evidence available at that time; later source checks can change.
A capture documents what was shown. A scanner result records that provider’s assessment at the time of its check. Neither a valid certificate nor a zero-detection result is a guarantee of safety.