VirusTotal
10 / 92 engine detections
打开报告kn.kaykyr.com:钓鱼,PhishDestroy 于 2026-10-22 检测到。风险:关键(90/100)。注册商:IONOS SE。状态:最后已知的活跃状态。托管:Oracle Corporation。PhishDestroy 已发送1 份滥用举报。VirusTotal:10/92 个引擎标记。已列入 Spamhaus DBL。请勿输入登录凭据,也不要连接钱包。
“Index of /”
钓鱼: kn.kaykyr.com — 最后已知的活跃状态 (HTTP 200). 证据摘要: VirusTotal 10/92 (alphaMountain.ai, BitDefender, CRDF, DNS8, Fortinet); URLScan capture; Spamhaus DBL_PHISH…
The evidence summary below uses retained observations. Each source keeps its own collection date.
10 / 92 engine detections
打开报告DBL_PHISH
扫描报告
打开报告无社区引用
打开报告provider verdict: clean
打开报告无威胁标记
打开报告页面快照
打开报告结果反映各来源的采集时间。零检出不代表安全。OTX 引用为社区发布的内容。
已存档的页面、网络和扫描器观测结果,按来源和观测时间分组。
观察到: · Retrieved:
| Uuid | 01a163b2-470d-7621-9d16-ad87c05e222c |
|---|---|
| Final url | https://kn.kaykyr.com/zcwKaMssDubqzozzdajXsjZ7PhSPIAKh/ |
| 状态 | 200 |
| 已重定向 | same-domain |
| Redirects | [
{
"to": "https://kn.kaykyr.com/zcwKaMssDubqzozzdajXsjZ7PhSPIAKh",
"from": "http://kn.kaykyr.com/zcwKaMssDubqzozzdajXsjZ7PhSPIAKh",
"status": 307
},
{
"to": "https://kn.kaykyr.com/zcwKaMssDubqzozzdajXsjZ7PhSPIAKh/",
"from": "https://kn.kaykyr.com/zcwKaMssDubqzozzdajXsjZ7PhSPIAKh",
"status": 301
}
] |
| Ip | 50.6.241.177 |
| Ptr | server.nuvhte.com |
| Contacted domains | [
"unpkg.com",
"ajax.googleapis.com"
] |
| Contacted IP addresses | [
"104.18.1.22",
"192.178.183.95",
"50.6.241.177"
] |
| Asns | [
"13335",
"15169",
"31898"
] |
| Countries | [
"US",
"CA"
] |
| Document hash | 35e5631c1d8571fe871a24e98d88d7756c5c5a3790052d0d1af2158a86222b78 |
| Globals | [
"$",
"jQuery",
"setImmediate",
"clearImmediate",
"swal",
"sweetAlert"
] |
| Tls | {
"san": [
"*.kn.kaykyr.com",
"kn.kaykyr.com"
],
"cipher": "AES_128_GCM",
"issuer": "YR2",
"subject": "kn.kaykyr.com",
"protocol": "TLS 1.3",
"valid_to": "2027-01-02T03:12:08Z",
"valid_from": "2026-10-04T03:12:09Z"
} |
| 域名年龄(天) | 17 |
| Apex age days | 117 |
| Tls age days | 18 |
| TLS 有效天数 | 89 |
| Requests | 9 |
| Provider verdicts | {
"engines": {
"tags": [
"urlscan-ml",
"urlscan-ml-60c5e22"
],
"score": 99,
"malicious": true
},
"overall": {
"tags": [
"phishing"
],
"score": 100,
"brands": [
"bt"
],
"malicious": true,
"categories": [
"phishing"
]
},
"urlscan": {
"tags": [
"phishing"
],
"score": 100,
"brands": [
"BT"
],
"malicious": true,
"categories": [
"phishing"
]
}
} |
| HTTP headers | {
"server": "Apache",
"content-type": "text/html; charset=UTF-8"
} |
观察到: · Retrieved:
| Uuid | 21cb3931-62c0-4d81-91c5-79c4a333281f |
|---|---|
| Final url | https://kn.kaykyr.com/ |
| 状态 | 200 |
| History | [
{
"url": "https://kn.kaykyr.com/",
"status": 200
}
] |
| DOM structure hash | 27e3c315292eb89220d0e848113ec9ec61af999e43f7b30a57ef11840e8aa249 |
| Document hash | bd0e0f7d6f9d39c0fc8e71b216931d112a2714cff2a9cdab13684e28bf9aee45 |
| Radar rank | {
"bucket": ">200000"
} |
| DNS 记录 | [
{
"name": "kn.kaykyr.com",
"type": "A",
"value": "50.6.241.177"
}
] |
| DNSSEC 有效 | false |
| Ip | 50.6.241.177 |
| 注册记录 | {
"registrar": "IONOS SE",
"created": "2026-06-25T18:27:18Z",
"updated": "2026-07-13T03:24:11Z",
"expires": "2027-06-25T18:27:18Z",
"nameservers": [
"ns1.bta3nixosmall.shop",
"ns2.bta3nixosmall.shop"
]
} |
观察到: · Retrieved:
| Vendor result counts | {
"timeout": 0,
"harmless": 46,
"malicious": 7,
"suspicious": 3,
"undetected": 36
} |
|---|---|
| Vendor labels | {
"CRDF": "malicious",
"DNS8": "suspicious",
"G-Data": "phishing",
"Sophos": "phishing",
"Webroot": "malicious",
"Fortinet": "spam",
"SOCRadar": "phishing",
"Kaspersky": "phishing",
"BitDefender": "phishing",
"alphaMountain.ai": "spam"
} |
| Reputation | 0 |
| 注册商 | IONOS SE |
| 创建 | 2026-06-25T18:27:18Z |
| Expires | 2027-06-25T18:27:18Z |
| Updated | 2026-07-13T03:24:11Z |
| 首次发现 | 2026-10-04T05:24:26Z |
| DNS 记录 | [
{
"ttl": 21600,
"type": "SOA",
"rname": "root.50-6-241-177.cprapid.com",
"value": "ns1.bta3nixosmall.shop"
},
{
"ttl": 21600,
"type": "NS",
"value": "ns1.bta3nixosmall.shop"
},
{
"ttl": 14400,
"type": "MX",
"value": "kn.kaykyr.com",
"priority": 0
},
{
"ttl": 14400,
"type": "A",
"value": "50.6.241.177"
},
{
"ttl": 14400,
"type": "TXT",
"value": "v=spf1 ip4:50.6.241.177 +a +mx +ip4:217.160.143.80 ~all"
},
{
"ttl": 21600,
"type": "NS",
"value": "ns2.bta3nixosmall.shop"
}
] |
| Dns at | 2026-10-22T10:26:26Z |
| Jarm | 15d3fd16d29d29d00042d43d0000001ae0802418786940cae38f1d9eed5b9b |
| Certificate | {
"san": [
"*.kn.kaykyr.com",
"kn.kaykyr.com"
],
"issuer": "Let's Encrypt / YR2",
"serial": "61e6c82725337d0f6e9f452eea249a8fe5f",
"sha256": "74d8708bd7f6a87b93b221a569c886c74ee424362b6224f0055264ae0bb4cda5",
"subject": "kn.kaykyr.com",
"valid_to": "2027-01-02T03:12:08Z",
"valid_from": "2026-10-04T03:12:09Z"
} |
| 注册记录 | {
"registrar": "IONOS SE",
"registrar_iana_id": "83",
"registrar_url": "http://www.ionos.com",
"created": "2026-06-25T18:27:18Z",
"updated": "2026-07-13T03:24:11Z",
"expires": "2027-06-25T18:27:18Z",
"status": [
"clientTransferProhibited"
],
"nameservers": [
"ns1.bta3nixosmall.shop",
"ns2.bta3nixosmall.shop"
],
"dnssec": "Unsigned"
} |
| Mail configuration | {
"mx": [
"kn.kaykyr.com"
],
"spf": "v=spf1 ip4:50.6.241.177 +a +mx +ip4:217.160.143.80 ~all",
"dkim": [
"default"
],
"dmarc": true,
"dkim_bits": 2048,
"spf_lookups": 2
} |
|---|---|
| CAA 记录 | {
"domain": "kn.kaykyr.com"
} |
| Protective DNS results | {
"resolvers": 12,
"blocked_count": 0
} |
| Web archive observations | {
"last": "2026-10-22T13:00:23Z",
"first": "2026-10-22T13:00:23Z",
"changes": 0,
"days_archived": 1,
"avg_page_bytes": 2435
} |
| 页面标题与元数据 | {
"title": "Index of /"
} |
| Trackers | {
"requests": 1
} |
| 表单与混合内容 | {
"third_party_scripts": 0
} |
| 状态 | {
"up": true,
"code": 200,
"timings": {
"dns": 2,
"tls": 129,
"wait": 133,
"connect": 124,
"download": 0
},
"response_ms": 388
} |
| TLS connection | {
"alpn": "http/1.1",
"cipher": "TLS_AES_256_GCM_SHA384",
"protocol": "TLSv1.3",
"versions": [
"TLSv1.2",
"TLSv1.3"
],
"authorized": true,
"forward_secrecy": true
} |
| Ports | {
"open": [
22,
25,
53,
80,
110,
143,
443,
587,
993,
995,
3306
]
} |
| Carbon | {
"bytes": 11039,
"co2_grams": 0.0004,
"cleaner_than": 70
} |
| Dns server | {
"ns": [
{
"ip": "50.6.241.177",
"host": "ns2.bta3nixosmall.shop"
},
{
"ip": "50.6.241.177",
"host": "ns1.bta3nixosmall.shop"
}
],
"zone": "kn.kaykyr.com"
} |
| Location | {
"ip": "50.6.241.177",
"asn": "31898",
"org": "Oracle Corporation",
"city": "Toronto",
"country": "CA"
} |
| Ssl | {
"issuer": "Let's Encrypt / YR2",
"subject": "kn.kaykyr.com"
} |
| DNS 记录 | {
"A": [
"50.6.241.177"
],
"MX": [
"{\"exchange\": \"kn.kaykyr.com\", \"priority\": 0}"
],
"NS": [
"ns2.bta3nixosmall.shop",
"ns1.bta3nixosmall.shop"
],
"SOA": "{\"nsname\": \"ns1.bta3nixosmall.shop\", \"hostmaster\": \"root.50-6-241-177.cprapid.com\", \"serial\": 2026101305, \"refresh\": 3600, \"retry\": 1800, \"expire\": 1209600, \"minttl\": 86400}",
"TXT": [
"v=spf1 ip4:50.6.241.177 +a +mx +ip4:217.160.143.80 ~all"
]
} |
| Dnssec | {
"ds": false,
"rrsig": false,
"dnskey": false
} |
| Hsts | {
"message": "Site does not serve any HSTS headers."
} |
| HTTP security policies | {
"xFrameOptions": false,
"referrerPolicy": false,
"xXSSProtection": false,
"permissionsPolicy": false,
"xContentTypeOptions": false,
"contentSecurityPolicy": false,
"strictTransportPolicy": false,
"crossOriginOpenerPolicy": false,
"crossOriginEmbedderPolicy": false,
"crossOriginResourcePolicy": false
} |
| Get ip | {
"ip": "50.6.241.177",
"family": 4
} |
| Redirects | {
"chain": [
"https://kn.kaykyr.com"
]
} |
| 子域名 | {
"count": 31,
"subdomains": [
"bd.kaykyr.com",
"bx.kaykyr.com",
"by.kaykyr.com",
"cd.kaykyr.com",
"cu.kaykyr.com",
"du.kaykyr.com",
"eh.kaykyr.com",
"et.kaykyr.com",
"fl.kaykyr.com",
"fm.kaykyr.com",
"gh.kaykyr.com",
"hg.kaykyr.com",
"hq.kaykyr.com",
"iu.kaykyr.com",
"iv.kaykyr.com",
"jn.kaykyr.com",
"kn.kaykyr.com",
"ma.kaykyr.com",
"mg.kaykyr.com",
"oa.kaykyr.com",
"ok.kaykyr.com",
"oy.kaykyr.com",
"qp.kaykyr.com",
"ui.kaykyr.com",
"vo.kaykyr.com",
"wc.kaykyr.com",
"wo.kaykyr.com",
"ws.kaykyr.com",
"wv.kaykyr.com",
"zk.kaykyr.com",
"zo.kaykyr.com"
]
} |
| Tech stack | {
"technologies": [
"Apache HTTP Server"
]
} |
| Page links | {
"internal_count": 56
} |
| 注册记录 | {
"registrar": "IONOS SE",
"created": "2026-06-25T18:27:18Z",
"updated": "2026-07-13T03:24:11Z",
"expires": "2027-06-25T18:27:18Z",
"status": [
"clientTransferProhibited https://icann.org/epp"
],
"nameservers": [
"ns1.bta3nixosmall.shop",
"ns2.bta3nixosmall.shop"
]
} |
| HTTP headers | {
"headers": {
"server": "Apache",
"content-type": "text/html;charset=ISO-8859-1"
}
} |
不是。PhishDestroy 将 kn.kaykyr.com 归类为“钓鱼”(风险:关键,90/100),首次检测于 2026-10-22。VirusTotal:10/92 个引擎标记。已列入 Spamhaus DBL。请将该网站视为不安全。
不安全。请勿在 kn.kaykyr.com 连接钱包、签署消息或批准代币。钓鱼网站会请求授权(approve、setApprovalForAll、Permit2),让运营者转走你的资产,而已确认的交易无法撤销。
更改你在该网站输入过的所有密码,并开启双重验证。如果你连接过钱包或签署过任何内容,请撤销授权,并将剩余资金转到新钱包;切勿透露助记词。分步指南:紧急处理指南。
ns1.bta3nixosmall.shopns2.bta3nixosmall.shopkn.kaykyr.compriority 0位置信息描述的是 IP 网络。
74d8708bd7f6a87b93b221a569c886c74ee424362b6224f0055264ae0bb4cda5*.kn.kaykyr.comkn.kaykyr.com已保存的证书元数据。未带时区的证书日期按存档原样显示。传输加密并不能证明该网站值得信任。
Google PageSpeed Insights — 移动端性能审核: kn.kaykyr.com · checked Oct 22, 2026
由本地采集流程保留的带时间戳的响应元数据。以下各项数值均对应所显示的存档时间。
http://kn.kaykyr.com/zcwKaMssDubqzozzdajXsjZ7PhSPIAKhhttp://kn.kaykyr.com/zcwKaMssDubqzozzdajXsjZ7PhSPIAKh/Server: ApacheContent-Type: text/html; charset=UTF-8Keep-Alivetext/html; charset=UTF-8Thu, 22 Oct 2026 13:00:35 GMTtimeout=5, max=99Apachechunked由采集器保留的数值;较长的值可能在采集时被截短。
估算时间描述的是一个观测时间窗口。它并不能证明注册商采取了措施,也不代表网站变为不可访问的确切时刻。
由监测程序和来源采集器保留的带日期变更记录。最新观测排在最前;来源状态并不能证明站点已被下架。
可访问
比较浏览器与爬虫各自收到的内容,并检查是否存在 Keitaro 流量分发。
kn.kaykyr.com
PD-20261022-BB0394 Recipient: abuse@ionos.com AUP & Terms of Service Violations: Acceptable Use Policy: Active phishing operations targeting internet users directly violate standard AUP provisions prohibiting fraud and deceptive practices. Terms of Service: Material breach of service terms regarding malicious use, providing contractual justification for immediate suspension. Applicable Legal Framework (DE): German Criminal Code § 263 (Fraud) German Criminal Code § 263a (Computer Fraud) Telemedia Act (TMG) German law prohibits fraud and computer-based deception. Investigation Notice: We fully respect your internal investigation processes and discretion. Prompt remediation protects innocent users while mitigating regulatory compliance scrutiny, legal liability, and brand reputation risks associated with ongoing malicious infrastructure.
如果您输入了帐户凭据、个人或付款信息,或者从此域下载了文件,请立即采取措施。以下资源可帮助您报告事件并保护自己。
选择您所在的国家/地区以获取 官方网络犯罪联系人 或 创建投诉草稿 →。
Template-based draft · optional AI wording assistance requires separate consent
请根据您提供过的信息选择相应的步骤。请将本报告的副本与您自己的记录一并保存。
停止使用可疑网站。请通过官方应用或您已信任的网址访问真正的服务。
请将原始邮件、收据、消息和截图保存在安全的地方。基于事实的时间线有助于受理机构了解事件经过。 IC3 evidence guidance ↗
kn.kaykyr.com)即使你并不了解所有细节—— 不管怎样都要提交报告. 即使信息不完整,对调查仍有帮助。
举报并不能保证追回损失或启动调查,但及时、准确的交易数据可以帮助执法机构和服务提供商追踪事件。
Further guidance: NIST · phishing responseFBI IC3 · reports & evidenceFTC · recovery scams
本报告汇总了已保存的页面快照、注册与网络记录、扫描器结果以及 PhishDestroy 举报历史。每个来源均保留各自的观测日期。打开来源报告即可查看原始结果。
快照记录的是当时显示的内容。扫描器结果记录的是该服务商在检查时的评估。有效证书或零检出结果都不能保证安全。