app[.]kamlno-finance[.]com

The domain app.kamlno-finance.com is a phishing site engaged in brand impersonation, specifically targeting Google users under the guise of a tech-support scam. It was designed to deceive victims into believing they were interacting with a legitimate service, though no crypto drainer kit was identified. As of the latest verification, app.kamlno-finance.com has been taken offline.

Technical analysis shows that app.kamlno-finance.com was flagged by 1 of 95 VirusTotal security vendors, including alphaMountain.ai. The domain appears on 2 security blocklists (PhishDestroy and ScamSniffer) and was created on 2026-02-21. It resolved to the IP address 104.21.96.1, hosted by Cloudflare in the US (AS13335), and used an SSL certificate issued by WE1. The observed page title was 'KMNO Season 3 Allocation | Kamino Finance,' despite impersonating Google. Gridinsoft assigned it a trust score of 0/100, reinforcing its malicious classification.

Victims of app.kamlno-finance.com should immediately change any passwords entered on the site and enable two-factor authentication (2FA) on affected accounts. Monitor financial and login activity for signs of fraud. Report the phishing domain to Google Safe Browsing, the Federal Trade Commission (FTC), and local cybercrime authorities. If the site was accessed via a work or school account, notify the IT security team for further investigation.