Analysis of kitsumc.com indicates an active phishing domain registered on June 13, 2026, through Turkticaret.net Yazılım Hizmetleri Sanayi ve Ticaret A.Ş. As of July 30, 2026, the domain remains operational and is currently flagged by one security blocklist, with PhishDestroy marking it as blocked. Infrastructure review shows the domain resolving to IP address 63.176.8.218 and utilizing nameservers dns1.p04.nsone.net, dns2.p04.nsone.net, dns3.p04.nsone.net, and dns4.p04.nsone.net.
VirusTotal scans conducted by 91 vendors returned no detections, though this absence does not confirm safety, as phishing domains often evade initial detection. No additional details regarding the specific brand target, phishing kit, or exact content of the site are available at this time. Defenders should treat this domain as potentially malicious, monitor for further blocklist additions, and consider proactive blocking based on the current blocklist status and registrar reputation.
The domain’s continued activity and lack of widespread detection suggest it may be in early deployment or employing evasion techniques. Further analysis of the site’s content and traffic patterns is recommended to determine the exact threat vector.