kinhelp[.]top
Pemeriksaan phishing dan keamanan kinhelp.top
“The United States Social Security Administration | SSA”
kinhelp.top — Konten tidak tersedia (HTTP 502). Peniruan identitas merek: Govus; Jenis penipuan: Generic Phishing. Ringkasan bukti: VT 15/91 (ADMINUSLabs, alphaMountain.ai, BitDefender, Certego, Chong Lua Dao); URLQuery 6 alerts; URLScan malicious; GSB no flag; BL 0; PD 100/100. Registrar: Cosmotown.
Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.
PhishDestroy first observed kinhelp.top on Mar 11, 2026. The current evidence record is rated critical at 100/100. 3 independent sources recorded positive findings: VirusTotal, URLQuery, and URLScan.
VirusTotal recorded 15 detections among 91 engines: ADMINUSLabs, alphaMountain.ai, BitDefender, Certego, Chong Lua Dao, CyRadar, ESET, Forcepoint ThreatSeeker, Fortinet, G-Data, Gridinsoft, Kaspersky, Lionic, Sophos, VIPRE on Aug 1, 2026 at 02:35 UTC. URLQuery recorded 6 threat-system alerts on Mar 11, 2026 at 02:38 UTC. URLScan returned a malicious verdict with score 100. The external blocklist snapshot contained no matches on Aug 7, 2026 at 14:20 UTC. On Mar 11, 2026 at 04:02 UTC, Google Safe Browsing returned no flag; PhishStats returned no feed match.
HTTP 502 was recorded on Aug 7, 2026 at 02:03 UTC; content was unavailable. Registration records for the domain list Cosmotown as the registrar and Mar 11, 2026 as the creation date. Registration preceded first observation by 0 days. At collection time, the domain resolved to 192.142.54.88 on AS214036 (Ultahost, Inc.). The stored server header is LiteSpeed. Collected metadata identifies Govus as the apparent target. Captured page title: “The United States Social Security Administration | SSA”. PhishDestroy classified the observed content as Generic Phishing. DOM analysis completed on Jul 29, 2026 at 04:06 UTC; stored DOM score 56/100. IoC extraction completed on Aug 1, 2026 at 04:02 UTC; stored 0 format-validated wallet addresses and 0 Telegram indicators. TLS metadata lists Let's Encrypt as the certificate issuer with validity through Jun 2, 2026; checked Mar 15, 2026 at 05:42 UTC.
A stored capture reference is available for visual review.
Intelijen Keamanan Jaringan
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| YARAhub by abuse.ch | kinhelp.top/ |
malware | Detects file containing Telegram Bot API |
| YARAhub by abuse.ch | ultra.mediafire.com/2289;rbxriiv7nj8gwazkp7dfvwgs1dpatgqswek2dqkmonkvwx_ionigysntkspjqzbthjlgb14my7khcvlgmxj6opphi9iarjmaocauuasmsad5htrfxki1qik-v4kmvjptkb3repjzqwpq3e0qhpmam2p9ma9fzg1d5qgso871opm9udp2l1xbm2s8cx3rot5izx_l-a/1npfm88d75kb4xx/ssa_e-file.vb |
malware | Detect files disabling or modifying Windows Defender, Windows Firewall, or Microsoft Smartscreen |
| DigiCert UltraDNS | www.mediafire.com |
malicious | Sinkholed |
| DNS4EU | kinhelp.top |
malicious | Sinkholed |
| DigiCert UltraDNS | ultra.mediafire.com |
malicious | Sinkholed |
| DNS4EU | ultra.mediafire.com |
malicious | Sinkholed |
Alur Tanggapan Ancaman Pipeline
Status Daftar Blokir Publik
Tangkapan tersimpan
Intelijen Domain
Rincian teknisDNS, SAN SSL, cap waktu
ICANN OVERSIGHT
Akreditasi dan konteks RAA
Akreditasi dan konteks RAA
ICANN Sudah Dibayar. Akuntabilitas Tak Kunjung Datang.
Untuk gTLD ini, registrar di atas beroperasi berdasarkan kontrak dengan ICANN. ICANN memungut biaya tahunan, biaya variabel, dan biaya berbasis transaksi yang terkait dengan pendaftaran, perpanjangan, dan transfer.
Akreditasi: dimonetisasi. Akuntabilitas: silakan periksa kembali nanti.
Lalu keajaiban dimulai: ICANN menulis RAA §3.18, registrar menyelidiki penyalahgunaan di dalam basis pelanggannya sendiri, dan para korban menyerahkan bukti secara cuma-cuma sementara setiap lapisan menunggu pihak lain bertindak. Jika itu membuat para korban merasa lebih aman, bagus sekali—ternyata tagihannya bekerja.
Teknologi · 2 identified
High-performance web server compatible with Apache configurations.
Third major version of HTTP protocol, built on QUIC for faster, more reliable connections.
Analisis VirusTotal
Analisis Performa Situs
Google PageSpeed Insights — mobile performance audit of kinhelp.top · checked Mar 11, 2026
Bukti & Laporan Eksternal
Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive