Scam Detective
Domain

rkill.com

First seen Feb 22, 2026

Suspicious
  • No SSL certificate
  • WHOIS registration hidden
  • 16 community reports from users

Campaign Intelligence

This cluster centers on 2764 connected domains tagged as BeaverTail, Kaiji, fbf543. 645 of these domains have been flagged by threat intelligence feeds including Google Safe Browsing and URLhaus. The connected infrastructure includes 1132 phone numbers (7638857447, 8664372914, 2157987305) with 10266 FTC complaints; 146 companies (JPMORGAN CHASE & CO., Advanced Resolution Services Inc., EVERBANK, NATIONAL ASSOCIATION) with 8616274 CFPB complaints; 298 email addresses (xxxxxxxxxxxxxxxxxxxxxxxx@vm...

This cluster centers on 3287 connected domains tagged as HijackLoader, RemcosRAT, screenconnect. 617 of these domains have been flagged by threat intelligence feeds including Google Safe Browsing and URLhaus. The connected infrastructure includes 1649 phone numbers (5408463620, 8552597377, 8007873903) with 7110 FTC complaints; 143 companies (Informative LLC, HomePlus Corporation, Doral Capital Corporation) with 8547081 CFPB complaints; 807 email addresses (kellymoore_64@yahoo.com, schantzsybg7@...

This cluster centers on 2874 connected domains tagged as QuasarRAT, StealitStealer, pw-k53mv9bc. 652 of these domains have been flagged by threat intelligence feeds including Google Safe Browsing and URLhaus. The connected infrastructure includes 1375 phone numbers (2157987305, 2025069230, 2028641298) with 14635 FTC complaints; 160 companies (JPMORGAN CHASE & CO., Advanced Resolution Services Inc., EVERBANK, NATIONAL ASSOCIATION) with 8680419 CFPB complaints; 299 email addresses (abuse@fb.com, ...

This cluster centers on 1486 connected domains tagged as None, keylogger. 5 of these domains have been flagged by threat intelligence feeds including Google Safe Browsing and URLhaus. The connected infrastructure includes 1364 phone numbers (3124141737, 3163966869, 8553892999) with 17909 FTC complaints; 170 companies (EQUIFAX, INC., TRANSUNION INTERMEDIATE HOLDINGS, INC., BANK OF AMERICA, NATIONAL ASSOCIATION) with 8747332 CFPB complaints; 187 email addresses (xxxxxxxxxxxxxxxxxxxxxxxx@vmh5.grup...

Details

Registrar
DYNADOT LLC
Registration Date
2/22/2021
First Seen
2/22/2026

Related Domains

Community Reports

Am I still compromised? TL;DR I went to the website in [this picture](http://puu.sh/pQ2ll/784eb6bbe8.jpg) and downloaded a file disguised as a flash update and executed it repeatedly like a moron. I'll put this at the top for those disinterested in the story, I've run Malwarebytes Anti-Malware to no avail, I ran rkill.com and it interacted with nothing, and after that I did a system restore to a point two days ago. I'm aware system restore is dubious at best, but I can't think of anything more appropriate to do for something I doubt would even flag as spyware than simply factory resetting my laptop, which I still might do. It feels as if it's running slower than usual, but it's so barely noticeable that it might just be that I rebooted it for the first time in a while combined with placebo. Might I still be infected? I woke up this morning and popped my laptop open, and within minutes of logging onto Steam, a person on my friends list that sends messages to me sporadically with large gaps in between sent me a link saying he found me in a video on Twitch for a game that I play very often. Being early morning, from a friend that does this often, I clicked the link, but instead of the video playing, the box simply showed the "You must update Adobe Flash Player" notice that looks exactly like it would've normally. Here's a screen cap I hesitantly went back for, to show my friend that I'm slightly less of an idiot, http://puu.sh/pQ2ll/784eb6bbe8.jpg Now I just bought this laptop, so in my drunken tiredness this didn't bring up any red flags, even when I clicked on it and it downloaded a file instantly instead of bringing up the Adobe website. For whatever reason, I attempted to open the file repeatedly, and it kept popping up a command prompt with a title I don't recall and am not interested in opening it again to read. If you care enough, feel free to grab the URL from the screen cap. The stars aligned perfectly for me to fall into this trap, as I conveniently was l

3553 days ago2 upvotes

Am I still compromised? TL;DR I went to the website in [this picture](http://puu.sh/pQ2ll/784eb6bbe8.jpg) and downloaded a file disguised as a flash update and executed it repeatedly like a moron. I'll put this at the top for those disinterested in the story, I've run Malwarebytes Anti-Malware to no avail, I ran rkill.com and it interacted with nothing, and after that I did a system restore to a point two days ago. I'm aware system restore is dubious at best, but I can't think of anything more appropriate to do for something I doubt would even flag as spyware than simply factory resetting my laptop, which I still might do. It feels as if it's running slower than usual, but it's so barely noticeable that it might just be that I rebooted it for the first time in a while combined with placebo. Might I still be infected? I woke up this morning and popped my laptop open, and within minutes of logging onto Steam, a person on my friends list that sends messages to me sporadically with large gaps in between sent me a link saying he found me in a video on Twitch for a game that I play very often. Being early morning, from a friend that does this often, I clicked the link, but instead of the video playing, the box simply showed the "You must update Adobe Flash Player" notice that looks exactly like it would've normally. Here's a screen cap I hesitantly went back for, to show my friend that I'm slightly less of an idiot, http://puu.sh/pQ2ll/784eb6bbe8.jpg Now I just bought this laptop, so in my drunken tiredness this didn't bring up any red flags, even when I clicked on it and it downloaded a file instantly instead of bringing up the Adobe website. For whatever reason, I attempted to open the file repeatedly, and it kept popping up a command prompt with a title I don't recall and am not interested in opening it again to read. If you care enough, feel free to grab the URL from the screen cap. The stars aligned perfectly for me to fall into this trap, as I conveniently was l

3553 days ago2 upvotes

Am I still compromised? TL;DR I went to the website in [this picture](http://puu.sh/pQ2ll/784eb6bbe8.jpg) and downloaded a file disguised as a flash update and executed it repeatedly like a moron. I'll put this at the top for those disinterested in the story, I've run Malwarebytes Anti-Malware to no avail, I ran rkill.com and it interacted with nothing, and after that I did a system restore to a point two days ago. I'm aware system restore is dubious at best, but I can't think of anything more appropriate to do for something I doubt would even flag as spyware than simply factory resetting my laptop, which I still might do. It feels as if it's running slower than usual, but it's so barely noticeable that it might just be that I rebooted it for the first time in a while combined with placebo. Might I still be infected? I woke up this morning and popped my laptop open, and within minutes of logging onto Steam, a person on my friends list that sends messages to me sporadically with large gaps in between sent me a link saying he found me in a video on Twitch for a game that I play very often. Being early morning, from a friend that does this often, I clicked the link, but instead of the video playing, the box simply showed the "You must update Adobe Flash Player" notice that looks exactly like it would've normally. Here's a screen cap I hesitantly went back for, to show my friend that I'm slightly less of an idiot, http://puu.sh/pQ2ll/784eb6bbe8.jpg Now I just bought this laptop, so in my drunken tiredness this didn't bring up any red flags, even when I clicked on it and it downloaded a file instantly instead of bringing up the Adobe website. For whatever reason, I attempted to open the file repeatedly, and it kept popping up a command prompt with a title I don't recall and am not interested in opening it again to read. If you care enough, feel free to grab the URL from the screen cap. The stars aligned perfectly for me to fall into this trap, as I conveniently was l

3553 days ago2 upvotes

Am I still compromised? TL;DR I went to the website in [this picture](http://puu.sh/pQ2ll/784eb6bbe8.jpg) and downloaded a file disguised as a flash update and executed it repeatedly like a moron. I'll put this at the top for those disinterested in the story, I've run Malwarebytes Anti-Malware to no avail, I ran rkill.com and it interacted with nothing, and after that I did a system restore to a point two days ago. I'm aware system restore is dubious at best, but I can't think of anything more appropriate to do for something I doubt would even flag as spyware than simply factory resetting my laptop, which I still might do. It feels as if it's running slower than usual, but it's so barely noticeable that it might just be that I rebooted it for the first time in a while combined with placebo. Might I still be infected? I woke up this morning and popped my laptop open, and within minutes of logging onto Steam, a person on my friends list that sends messages to me sporadically with large gaps in between sent me a link saying he found me in a video on Twitch for a game that I play very often. Being early morning, from a friend that does this often, I clicked the link, but instead of the video playing, the box simply showed the "You must update Adobe Flash Player" notice that looks exactly like it would've normally. Here's a screen cap I hesitantly went back for, to show my friend that I'm slightly less of an idiot, http://puu.sh/pQ2ll/784eb6bbe8.jpg Now I just bought this laptop, so in my drunken tiredness this didn't bring up any red flags, even when I clicked on it and it downloaded a file instantly instead of bringing up the Adobe website. For whatever reason, I attempted to open the file repeatedly, and it kept popping up a command prompt with a title I don't recall and am not interested in opening it again to read. If you care enough, feel free to grab the URL from the screen cap. The stars aligned perfectly for me to fall into this trap, as I conveniently was l

3553 days ago2 upvotes

Am I still compromised? TL;DR I went to the website in [this picture](http://puu.sh/pQ2ll/784eb6bbe8.jpg) and downloaded a file disguised as a flash update and executed it repeatedly like a moron. I'll put this at the top for those disinterested in the story, I've run Malwarebytes Anti-Malware to no avail, I ran rkill.com and it interacted with nothing, and after that I did a system restore to a point two days ago. I'm aware system restore is dubious at best, but I can't think of anything more appropriate to do for something I doubt would even flag as spyware than simply factory resetting my laptop, which I still might do. It feels as if it's running slower than usual, but it's so barely noticeable that it might just be that I rebooted it for the first time in a while combined with placebo. Might I still be infected? I woke up this morning and popped my laptop open, and within minutes of logging onto Steam, a person on my friends list that sends messages to me sporadically with large gaps in between sent me a link saying he found me in a video on Twitch for a game that I play very often. Being early morning, from a friend that does this often, I clicked the link, but instead of the video playing, the box simply showed the "You must update Adobe Flash Player" notice that looks exactly like it would've normally. Here's a screen cap I hesitantly went back for, to show my friend that I'm slightly less of an idiot, http://puu.sh/pQ2ll/784eb6bbe8.jpg Now I just bought this laptop, so in my drunken tiredness this didn't bring up any red flags, even when I clicked on it and it downloaded a file instantly instead of bringing up the Adobe website. For whatever reason, I attempted to open the file repeatedly, and it kept popping up a command prompt with a title I don't recall and am not interested in opening it again to read. If you care enough, feel free to grab the URL from the screen cap. The stars aligned perfectly for me to fall into this trap, as I conveniently was l

3553 days ago2 upvotes

Am I still compromised? TL;DR I went to the website in [this picture](http://puu.sh/pQ2ll/784eb6bbe8.jpg) and downloaded a file disguised as a flash update and executed it repeatedly like a moron. I'll put this at the top for those disinterested in the story, I've run Malwarebytes Anti-Malware to no avail, I ran rkill.com and it interacted with nothing, and after that I did a system restore to a point two days ago. I'm aware system restore is dubious at best, but I can't think of anything more appropriate to do for something I doubt would even flag as spyware than simply factory resetting my laptop, which I still might do. It feels as if it's running slower than usual, but it's so barely noticeable that it might just be that I rebooted it for the first time in a while combined with placebo. Might I still be infected? I woke up this morning and popped my laptop open, and within minutes of logging onto Steam, a person on my friends list that sends messages to me sporadically with large gaps in between sent me a link saying he found me in a video on Twitch for a game that I play very often. Being early morning, from a friend that does this often, I clicked the link, but instead of the video playing, the box simply showed the "You must update Adobe Flash Player" notice that looks exactly like it would've normally. Here's a screen cap I hesitantly went back for, to show my friend that I'm slightly less of an idiot, http://puu.sh/pQ2ll/784eb6bbe8.jpg Now I just bought this laptop, so in my drunken tiredness this didn't bring up any red flags, even when I clicked on it and it downloaded a file instantly instead of bringing up the Adobe website. For whatever reason, I attempted to open the file repeatedly, and it kept popping up a command prompt with a title I don't recall and am not interested in opening it again to read. If you care enough, feel free to grab the URL from the screen cap. The stars aligned perfectly for me to fall into this trap, as I conveniently was l

3553 days ago2 upvotes

Am I still compromised? TL;DR I went to the website in [this picture](http://puu.sh/pQ2ll/784eb6bbe8.jpg) and downloaded a file disguised as a flash update and executed it repeatedly like a moron. I'll put this at the top for those disinterested in the story, I've run Malwarebytes Anti-Malware to no avail, I ran rkill.com and it interacted with nothing, and after that I did a system restore to a point two days ago. I'm aware system restore is dubious at best, but I can't think of anything more appropriate to do for something I doubt would even flag as spyware than simply factory resetting my laptop, which I still might do. It feels as if it's running slower than usual, but it's so barely noticeable that it might just be that I rebooted it for the first time in a while combined with placebo. Might I still be infected? I woke up this morning and popped my laptop open, and within minutes of logging onto Steam, a person on my friends list that sends messages to me sporadically with large gaps in between sent me a link saying he found me in a video on Twitch for a game that I play very often. Being early morning, from a friend that does this often, I clicked the link, but instead of the video playing, the box simply showed the "You must update Adobe Flash Player" notice that looks exactly like it would've normally. Here's a screen cap I hesitantly went back for, to show my friend that I'm slightly less of an idiot, http://puu.sh/pQ2ll/784eb6bbe8.jpg Now I just bought this laptop, so in my drunken tiredness this didn't bring up any red flags, even when I clicked on it and it downloaded a file instantly instead of bringing up the Adobe website. For whatever reason, I attempted to open the file repeatedly, and it kept popping up a command prompt with a title I don't recall and am not interested in opening it again to read. If you care enough, feel free to grab the URL from the screen cap. The stars aligned perfectly for me to fall into this trap, as I conveniently was l

3553 days ago2 upvotes

Am I still compromised? TL;DR I went to the website in [this picture](http://puu.sh/pQ2ll/784eb6bbe8.jpg) and downloaded a file disguised as a flash update and executed it repeatedly like a moron. I'll put this at the top for those disinterested in the story, I've run Malwarebytes Anti-Malware to no avail, I ran rkill.com and it interacted with nothing, and after that I did a system restore to a point two days ago. I'm aware system restore is dubious at best, but I can't think of anything more appropriate to do for something I doubt would even flag as spyware than simply factory resetting my laptop, which I still might do. It feels as if it's running slower than usual, but it's so barely noticeable that it might just be that I rebooted it for the first time in a while combined with placebo. Might I still be infected? I woke up this morning and popped my laptop open, and within minutes of logging onto Steam, a person on my friends list that sends messages to me sporadically with large gaps in between sent me a link saying he found me in a video on Twitch for a game that I play very often. Being early morning, from a friend that does this often, I clicked the link, but instead of the video playing, the box simply showed the "You must update Adobe Flash Player" notice that looks exactly like it would've normally. Here's a screen cap I hesitantly went back for, to show my friend that I'm slightly less of an idiot, http://puu.sh/pQ2ll/784eb6bbe8.jpg Now I just bought this laptop, so in my drunken tiredness this didn't bring up any red flags, even when I clicked on it and it downloaded a file instantly instead of bringing up the Adobe website. For whatever reason, I attempted to open the file repeatedly, and it kept popping up a command prompt with a title I don't recall and am not interested in opening it again to read. If you care enough, feel free to grab the URL from the screen cap. The stars aligned perfectly for me to fall into this trap, as I conveniently was l

3553 days ago2 upvotes

Am I still compromised? TL;DR I went to the website in [this picture](http://puu.sh/pQ2ll/784eb6bbe8.jpg) and downloaded a file disguised as a flash update and executed it repeatedly like a moron. I'll put this at the top for those disinterested in the story, I've run Malwarebytes Anti-Malware to no avail, I ran rkill.com and it interacted with nothing, and after that I did a system restore to a point two days ago. I'm aware system restore is dubious at best, but I can't think of anything more appropriate to do for something I doubt would even flag as spyware than simply factory resetting my laptop, which I still might do. It feels as if it's running slower than usual, but it's so barely noticeable that it might just be that I rebooted it for the first time in a while combined with placebo. Might I still be infected? I woke up this morning and popped my laptop open, and within minutes of logging onto Steam, a person on my friends list that sends messages to me sporadically with large gaps in between sent me a link saying he found me in a video on Twitch for a game that I play very often. Being early morning, from a friend that does this often, I clicked the link, but instead of the video playing, the box simply showed the "You must update Adobe Flash Player" notice that looks exactly like it would've normally. Here's a screen cap I hesitantly went back for, to show my friend that I'm slightly less of an idiot, http://puu.sh/pQ2ll/784eb6bbe8.jpg Now I just bought this laptop, so in my drunken tiredness this didn't bring up any red flags, even when I clicked on it and it downloaded a file instantly instead of bringing up the Adobe website. For whatever reason, I attempted to open the file repeatedly, and it kept popping up a command prompt with a title I don't recall and am not interested in opening it again to read. If you care enough, feel free to grab the URL from the screen cap. The stars aligned perfectly for me to fall into this trap, as I conveniently was l

3553 days ago2 upvotes

Am I still compromised? TL;DR I went to the website in [this picture](http://puu.sh/pQ2ll/784eb6bbe8.jpg) and downloaded a file disguised as a flash update and executed it repeatedly like a moron. I'll put this at the top for those disinterested in the story, I've run Malwarebytes Anti-Malware to no avail, I ran rkill.com and it interacted with nothing, and after that I did a system restore to a point two days ago. I'm aware system restore is dubious at best, but I can't think of anything more appropriate to do for something I doubt would even flag as spyware than simply factory resetting my laptop, which I still might do. It feels as if it's running slower than usual, but it's so barely noticeable that it might just be that I rebooted it for the first time in a while combined with placebo. Might I still be infected? I woke up this morning and popped my laptop open, and within minutes of logging onto Steam, a person on my friends list that sends messages to me sporadically with large gaps in between sent me a link saying he found me in a video on Twitch for a game that I play very often. Being early morning, from a friend that does this often, I clicked the link, but instead of the video playing, the box simply showed the "You must update Adobe Flash Player" notice that looks exactly like it would've normally. Here's a screen cap I hesitantly went back for, to show my friend that I'm slightly less of an idiot, http://puu.sh/pQ2ll/784eb6bbe8.jpg Now I just bought this laptop, so in my drunken tiredness this didn't bring up any red flags, even when I clicked on it and it downloaded a file instantly instead of bringing up the Adobe website. For whatever reason, I attempted to open the file repeatedly, and it kept popping up a command prompt with a title I don't recall and am not interested in opening it again to read. If you care enough, feel free to grab the URL from the screen cap. The stars aligned perfectly for me to fall into this trap, as I conveniently was l

3553 days ago2 upvotes

Share Your Experience

What's Your Exposure?

Know your risk exposure to this message with a Thorough Analysis. It returns a detailed report covering the complaint history, your data breach exposure, related scam entities, and risk signals tied to this email message. Check the box and enter your email address now.

Proton Pass Unique passwords for every account

After a breach, reused passwords let attackers into your other accounts. Proton Pass generates and stores a unique password for each one.