karalivekbuyukisyan[.]xyz

PhishDestroy first observed karalivekbuyukisyan.xyz on Jul 27, 2026. The captured page title is “karalivekbuyukisyan.xyz”. Current evidence score: 98/100 (critical).

Positive findings are stored from 2 sources: VirusTotal and Cloudflare Radar. VirusTotal recorded 16 detections among 91 engines: ADMINUSLabs, alphaMountain.ai, Antiy-AVL, BitDefender, Chong Lua Dao, ESET, Forcepoint ThreatSeeker, Fortinet, G-Data, Gridinsoft, Kaspersky, Lionic, SOCRadar, Sophos, VIPRE, Webroot on Aug 16, 2026 at 01:32 UTC. Cloudflare Radar classified the hostname as malicious and placed it in the command and control & botnet category; its verdict timestamp was not retained. Non-positive and contextual checks: AlienVault OTX listed 3 community pulse references (not vendor detections) on Aug 16, 2026 at 01:33 UTC. The separate external-blocklist snapshot contained no matches on Aug 21, 2026 at 22:20 UTC. Google Safe Browsing returned no flag on Aug 16, 2026 at 01:32 UTC.

The collector marked the hostname reachable on Aug 20, 2026 at 22:15 UTC, but did not retain the HTTP response code. Registration records for the domain list Dynadot Inc as the registrar. At collection time, the hostname resolved to 103.224.182.250 on AS133618 (Trellian Pty. Limited). The recorded endpoint location is San Diego, US. The stored server header is Apache. The evidence archive retains 1 visual capture from Cloudflare Radar. TLS metadata lists Let's Encrypt / YR2 as the certificate issuer with validity through Oct 23, 2026; checked Aug 14, 2026 at 04:02 UTC.

The content indicators and 2 positive source findings support the current phishing classification. The stored fields do not identify an impersonated brand or victim interaction.