kenyqgl.com
kenyqgl.com — Terakhir diketahui aktif (HTTP 200). Peniruan identitas merek: Unknown; Jenis penipuan: Impersonation. Ringkasan bukti: VirusTotal 4/89 (alphaMountain.ai, Chong Lua Dao, Forcepoint ThreatSeeker, SOCRadar); PhishDestroy score 81/100. Registrar: GoDaddy.
Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.
Ringkasan bukti
PhishDestroy first observed kenyqgl.com on Jul 27, 2026. Stored content metadata identifies Unknown as the apparent target. Page analysis recorded additional brand references to Godaddy and Yahoo. Stored page analysis classifies the content as impersonation. Campaign clustering links the hostname to the Unknown kit. Current evidence score: 81/100 (critical).
One source contains a positive finding: VirusTotal. VirusTotal recorded 4 detections among 89 engines: alphaMountain.ai, Chong Lua Dao, Forcepoint ThreatSeeker, SOCRadar on Sep 14, 2026 at 02:12 UTC. Non-positive and contextual checks: AlienVault OTX listed 3 community pulse references (not vendor detections) on Aug 14, 2026 at 06:26 UTC. The separate external-blocklist snapshot contained no matches on Sep 21, 2026 at 06:20 UTC. Google Safe Browsing returned no flag on Aug 14, 2026 at 06:25 UTC. URLScan completed without a malicious verdict (score 0) on Sep 19, 2026 at 03:31 UTC.
HTTP 200 was recorded on Sep 21, 2026 at 01:49 UTC. Registration records for the domain list GoDaddy.com, LLC as the registrar. At collection time, the hostname resolved to 15.197.148.33 on AS16509 (Amazon.com, Inc.). The recorded endpoint location is Montreal, CA. The stored server header is openresty. DOM analysis on Sep 18, 2026 at 02:21 UTC returned 81/100. The evidence archive retains 2 visual captures from PhishDestroy and Cloudflare Radar; no page title was retained, so the captures preserve the landing-page appearance. TLS metadata lists GoDaddy.com as the certificate issuer with validity through Oct 22, 2026; checked Aug 12, 2026 at 10:02 UTC.
Stored content provides classification context, but only one source contains a positive finding.
Forensic History & Detection Timeline
-
VirusTotal Detections Update Aug 14, 2026 · 02:17 UTCVirusTotal scanner detections updated from 2 to 3. Added scanner alerts: alphaMountain.ai.
-
VirusTotal Detections Update Aug 13, 2026 · 01:09 UTCVirusTotal scanner detections updated from 0 to 2. Added scanner alerts: Forcepoint ThreatSeeker, SOCRadar.
-
Threat First Observed Aug 12, 2026 · 11:13 UTCDomain ingestion complete. Initial state is marked as alive.
Alur Tanggapan Ancaman Pipeline
Status Daftar Blokir Publik
Evasion analysis
Cloaking & traffic-distribution check
Stored crawler-versus-browser observations for this host, plus a live fingerprint check for Keitaro-style traffic distribution systems.
- Stored cloaking flag
- Not yet scanned
- Last cloaking scan
Scanner note: alive_content: raw=ok; http=200; via=https_proxy
Teknologi · 9 identified
Analisis VirusTotal
Intelijen komunitas
1 laporan komunitas
KategoriOTHER_INVESTMENT_SCAM
I thought it was an online casino because it was promoted by gcash at some point it ask me two top up 200 so i can cash out. Then after i can finally cash out it is asking me to top up 2k again. Why would gcash promote that kind of website? It's obviously a scam if its a win we d
Bukti & Laporan Eksternal
“I thought it was an online casino because it was promoted by gcash at some point it ask me two top up 200 so i can cash out. Then after i can finally cash out it is asking me to top up 2k again. Why would gcash promote that kind of website? It's obviously a scam if its a win we do not have to cash in a huge amount of money. I hope y'all can look into this.”
Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive