Notification and current-status evidence
The sent-report ledger records the first outgoing report at . A report was sent to the recorded registrar; contact details remain in Domain Intelligence. The latest stored availability evidence still shows the domain reachable; 5 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
kratuxilki[.]com
Сводка доказательств
This domain, kratuxilki.com, was registered on February 21, 2026 through Hosting Concepts B.V. d/b/a Registrar.eu and is currently hosted behind Cloudflare (AS13335). DNS resolution points to the IP address 188.114.96.3, which is attributed to a Cloudflare data center in the United States. The domain serves an HTTPS endpoint secured by a Let’s Encrypt certificate (E7) and advertises modern security features such as HTTP Strict Transport Security and HTTP/3, typical of Cloudflare‑protected sites. VirusTotal reports that seven out of ninety‑five scanning engines flag the domain, indicating a moderate level of malicious detection.
Complementary reputation services reinforce the concern: Gridinsoft assigns a trust score of zero out of one hundred, Google Safe Browsing classifies the URL as a social‑engineering threat, and the domain appears on three public blocklists. Additional blocking services, including PhishDestroy, MetaMask, and SEAL, have also listed the domain as hostile. The nameservers in use are cruz.ns.cloudflare.com and peter.ns.cloudflare.com, confirming the Cloudflare front‑end.
As of the report date, the domain is marked offline, but the historical indicators suggest it was employed in a generic phishing campaign. Defenders should continue to block traffic to 188.114.96.3, monitor for any re‑activation of the domain, and add kratuxilki.com to internal URL filtering rules. Because the site is no longer live, forensic collection is limited to DNS, certificate, and third‑party detection data; further investigation would require obtaining any archived content from web caches if available.
Снимок отправленных доказательств
- Отправлено
- Записи журнала
- 1
- ID дела
PD-20260219-632E3C- PDF-файл
- PDF с доказательствами
Полный текст доказательств
Acceptable Use Policy: The domain kratuxilki.com is engaged in phishing activities, which constitutes a clear violation of your AUP prohibiting illegal activities and fraud.
Terms of Service: The ongoing use of this domain for deceptive practices violates your TOS, which reserves the right to suspend or terminate services for such violations.
Applicable Laws (GB):
Computer Misuse Act 1990 - This law criminalizes unauthorized access to computer systems, including phishing schemes designed to deceive individuals into providing personal information.
Fraud Act 2006 - This act makes it an offense to commit fraud by false representation, which is precisely what phishing entails.
Regulation (EU) 2016/679 (General Data Protection Regulation) - Phishing activities often involve the unlawful processing of personal data, which is a violation of GDPR principles.
Regulatory Note: Failure to take immediate action against this domain may result in regulatory scrutiny and potential liability under applicable laws. It is imperative to act swiftly to mitigate risks associated with non-compliance.
Data Coverage
Процесс реагирования на угрозы
Проверка по блок-листам
10 внешних источников под наблюдением · снимок от 12.08.2026
8 внешних источников под наблюдением Совпадений нет
Хронология обнаружения
-
Статус домена
Доступен → Недоступен
-
Cloudflare Radar
Сканирование Cloudflare Radar сохранено · Открыть сканирование
-
Статус домена
Недоступен → Доступен
Сохранённый снимок
Аналитика доменов
Технические деталиDNS, имена TLS и временные метки
ICANN OVERSIGHT
Аккредитация и контекст RAA
Аккредитация и контекст RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Анализ VirusTotal
Повлиял ли на вас этот сайт?
Если вы ввели учетные данные, личную или платежную информацию или загрузили файл с этого домена, примите немедленные меры. Ниже приведены ресурсы, которые помогут вам сообщить об инциденте и защитить себя.
Сообщите об этом в местные органы власти
Выберите свою страну, чтобы получить официальные контакты по киберпреступности или создать проект жалобы →.
Проверить любой домен
Анализ угроз с использованием сохраненного черного списка, WHOIS, DNS и общедоступных доказательств сканирования.
Сканировать сейчасСообщить о фишинге
Добавляйте подозрительные домены в нашу базу данных угроз — защищайте сообщество
СообщитьПоток оперативных данных об угрозах
Недавние сообщения о фишинге и наблюдаемые изменения доступности
ОтслеживатьБудьте в курсе событий, берегите себя
Отслеживайте актуальные угрозы или оспорьте эту запись, если считаете, что это ложное срабатывание