topmatch[.]ks[.]ua

PhishDestroy first observed topmatch.ks.ua on Sep 7, 2026. Stored content metadata identifies Apple as the apparent target. Page analysis recorded additional brand references to Apple id and Google. Current evidence score: 86/100 (critical).

One source contains a positive finding: VirusTotal. VirusTotal recorded 12 detections among 89 engines: alphaMountain.ai, BitDefender, CyRadar, ESET, Forcepoint ThreatSeeker, Fortinet, G-Data, Gridinsoft, Lionic, Sophos, VIPRE, Webroot on Sep 7, 2026 at 14:41 UTC. Non-positive and contextual checks: AlienVault OTX listed 4 community pulse references (not vendor detections) on Sep 7, 2026 at 14:42 UTC. The separate external-blocklist snapshot contained no matches on Sep 7, 2026 at 14:20 UTC. Google Safe Browsing returned no flag on Sep 7, 2026 at 14:41 UTC. URLScan captured the page on Sep 7, 2026 at 14:12 UTC.

The collector marked the hostname reachable on Sep 7, 2026 at 14:12 UTC, but did not retain the HTTP response code. Registration records for the domain list ТОВ "Центр інтернет-імен України" as the registrar and Mar 27, 2025 as the creation date. At collection time, the hostname resolved to 188.114.97.3 on AS13335 (Cloudflare, Inc.). The IP and ASN identify shared Cloudflare edge infrastructure; the origin server is not established by this address. DOM analysis on Sep 7, 2026 at 14:22 UTC returned 0/100; the source detections above were recorded separately. The evidence archive retains 2 visual captures from PhishDestroy and URLScan; no page title was retained, so the captures preserve the landing-page appearance. TLS metadata lists Google Trust Services as the certificate issuer.

Stored content provides classification context, but only one source contains a positive finding. The target field identifies Apple, but the record does not establish whether the page requested credentials, a seed phrase, or a wallet connection.