kamlnno[.]top

The domain kamlnno.top was registered on February 21, 2026 through Eranet International Limited and is currently listed as offline. Infrastructure analysis shows it resolves to the IP address 188.114.97.3, which is hosted by Cloudflare, Inc. (AS13335) and geolocated in the United States. The domain uses the Cloudflare nameservers clark.ns.cloudflare.com and lucy.ns.cloudflare.com, but no SSL certificate was observed, indicating that HTTPS is not configured. The site’s page title, "Swap | Limit Orders | Kamino Finance," suggests a cryptocurrency‑related interface, while the threat intelligence indicates a wallet/seed phishing campaign that impersonates the brand Hashflow.

Multiple detection mechanisms have flagged the domain. Four independent security blocklists include kamlnno.top, and it is blocked by PhishDestroy, MetaMask, ScamSniffer, and SEAL. Google Safe Browsing classifies the site as social engineering, and AlienVault OTX lists it in one threat pulse. VirusTotal scans show that 16 out of 93 security vendors returned a positive detection, reinforcing the malicious classification.

The Gridinsoft trust score of 0 out of 100 further confirms the domain’s lack of credibility. Because the domain is presently offline, active probing of its content or HTTP response codes is not possible, but the accumulated evidence—blocklist listings, vendor detections, brand impersonation, and low trust scores—strongly suggests a high‑risk phishing operation targeting users of Hashflow. Defensive recommendations include adding the domain and its resolving IP 188.114.97.3 to deny‑list rules on firewalls and endpoint protection platforms, monitoring for any future re‑hosting attempts, and informing affected users to avoid any unsolicited communications that reference Hashflow or request wallet credentials. Continuous re‑evaluation is advised should the domain reappear online, as the existing indicators provide a clear baseline for detection.