lntsagrams[.]com
“lntsagrams.com”
Pengamatan tersimpan
Perbedaan judul yang diamati
Ringkasan bukti
Analysis of lntsagrams.com shows that the domain is currently active and associated with a generic phishing campaign. The site returns an HTTP 403 status code and presents a page title identical to the domain name, suggesting a deliberately minimal surface. The domain resolves to 213.142.143.2, an address located in Turkey and assigned to AS60707 Kapteyan A.S. The hosting infrastructure uses a Let’s Encrypt certificate (issuer E8) and supports HTTP/3, indicating a modern web stack.
Registration data reveal that GoDaddy.com, LLC created the domain on November 11 2023, and the authoritative name servers are da1.kapteyan.com.tr and da2.kapteyan.com.tr. Intelligence sources corroborate malicious use: AlienVault OTX lists the domain in 14 separate threat pulses, and PhishDestroy has added it to its blocklist; overall the domain appears on one additional security blocklist. A Gridinsoft trust score of 0 / 100 and a VirusTotal detection ratio of 14‑of‑95 security vendors further confirm the malicious reputation. MX records exist (mail.lntsagrams.com, priority 10), which may be used for credential harvesting or spam distribution.
While the exact phishing lure, target audience, and page content have not been publicly disclosed, the convergence of multiple independent detections, a low trust rating, and the presence of a dedicated mail subdomain strongly indicate an operational phishing infrastructure. Defenders should block the domain and its associated IP at network perimeters, add the name servers to DNS sinkhole lists, and monitor for any outbound connections to the host. Continuous enrichment of internal feed with the OTX pulse identifiers and periodic re‑scanning on VirusTotal are recommended to capture any evolution of the payload or hosted resources.
Data Coverage
Intelijen Keamanan Jaringan
Alur Tanggapan Ancaman Pipeline
Cakupan daftar blokir
10 sumber eksternal dipantau · snapshot tersimpan 11/08/2026
Linimasa deteksi
-
VirusTotal
14 → 13
-
Status domain
Dapat dijangkau → Tidak dapat dijangkau
-
Cloudflare Radar
Pemindaian Cloudflare Radar tersimpan · Buka pemindaian
Tangkapan tersimpan
Intelijen Domain
Detail teknisDNS, nama TLS, dan stempel waktu
ICANN OVERSIGHT
Akreditasi dan konteks RAA
Akreditasi dan konteks RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Analisis VirusTotal
Analisis Performa Situs
Google PageSpeed Insights — mobile performance audit of lntsagrams.com · checked Mar 2, 2026
Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive