Notification and current-status evidence
The sent-report ledger records the first outgoing report at .
The recorded recipient is abuse@name.com.
The latest stored availability evidence still shows the domain reachable; 6 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
kast[.]asia
“KAST — Banking without the Bank”
kast.asia — Скрытый · достижимый. Тип мошенничества: Impersonation. Сводка доказательств: VirusTotal 4/93 (ChainPatrol, alphaMountain.ai, Bfore.Ai PreCrime, SOCRadar); URLQuery 2 alerts; cloaking observed; PhishDestroy score 93/100. Регистратор: Name.com.
Подробный анализ PhishDestroy AI ниже оставлен на английском, чтобы сохранить исходную криминалистическую запись.
The domain kast.asia has been identified as a confirmed phishing site designed to impersonate a neo-banking platform under the false branding of KAST — Banking without the Bank. Analysis indicates this is a generic phishing operation targeting users’ financial credentials, likely aiming to harvest login details or facilitate unauthorized transactions. The site is currently offline, but prior activity suggests it was actively used in credential theft campaigns. Infrastructure analysis reveals the domain was registered on February 21, 2026, through Name.com, Inc., and resolved to the IP address 216.150.1.129. It is flagged by 9 of 95 security vendors on VirusTotal, indicating broad detection across multiple threat intelligence sources. The domain appears on three independent security blocklists and is blocked by at least three major security tools. A Gridinsoft trust score of 0/100 further corroborates its malicious classification. The site employed a Let’s Encrypt SSL certificate and was built using modern web technologies including Node.js, React, Vercel, Next.js, HSTS, and Webpack, which may have been used to lend an appearance of legitimacy. While kast.asia is currently offline, the infrastructure and registration details suggest potential for reactivation or migration to new domains. Organizations and users are advised to block the domain and associated IP at the network level. Security teams should monitor for similar domains registered through the same registrar or resolving to the same IP range. End users should be alerted to the KAST impersonation scheme and instructed to verify banking platforms only through official channels. If credentials were entered on this site, immediate password resets and multi-factor authentication reviews are strongly recommended.
Данные сетевой безопасности
Процесс реагирования на угрозы
Статус в публичных блок-листах
Сохранённый снимок
Аналитика доменов
Технические сведенияDNS, SAN в протоколе SSL, временные метки
ICANN OVERSIGHT
Аккредитация и контекст RAA
Аккредитация и контекст RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Технологии · 6 identified
JavaScript runtime built on Chrome V8 engine for server-side development.
JavaScript library for building user interfaces with component-based architecture.
Cloud platform for frontend deployment, optimized for Next.js.
React framework for production with hybrid static and server rendering.
HTTP Strict Transport Security — forces browsers to use HTTPS connections only.
Module bundler for modern JavaScript applications.
Анализ VirusTotal
Архивные доказательства
Анализ производительности сайта
Google PageSpeed Insights — mobile performance audit of kast.asia · checked Jun 27, 2026
Доказательства и внешние отчеты
PD-20260202-5F2A1E Recipient: abuse@name.com Повлиял ли на вас этот сайт?
Если вы ввели учетные данные, личную или платежную информацию или загрузили файл с этого домена, примите немедленные меры. Ниже приведены ресурсы, которые помогут вам сообщить об инциденте и защитить себя.
Сообщите об этом в местные органы власти
Выберите свою страну, чтобы получить официальные контакты по киберпреступности или создать проект жалобы →.
Проверить любой домен
Анализ угроз с использованием сохраненного черного списка, WHOIS, DNS и общедоступных доказательств сканирования.
Сканировать сейчасСообщить о фишинге
Добавляйте подозрительные домены в нашу базу данных угроз — защищайте сообщество
СообщитьПоток оперативных данных об угрозах
Недавние сообщения о фишинге и наблюдаемые изменения доступности
ОтслеживатьБудьте в курсе событий, берегите себя
Отслеживайте актуальные угрозы или оспорьте эту запись, если считаете, что это ложное срабатывание