kamino-dex[.]com

Analysis indicates that the domain kamino-dex.com was registered by Fewmoretaps OU d/b/a Trustname.com and first observed on July 25 2026. The domain resolves to the IPv4 address 186.2.175.109 and is served by four nameservers: ares.trustname.com, ns1.anycastdns.cz, ns2.anycastdns.cz, and zeus.trustname.com. As of the report date (July 30 2026) the domain remains active and appears on a single security blocklist; it is also listed as blocked by the PhishDestroy feed.

VirusTotal reports show that the domain has been scanned by 91 antivirus and URL‑reputation engines, none of which have raised a detection at the time of analysis. No additional public intelligence such as Safe Browsing, OTX, SSL certificate details, HTTP status codes, or page‑title information is available in the current dataset. The combination of recent creation, single‑blocklist presence, and the lack of detections suggests a short‑lived infrastructure typical of credential‑harvesting campaigns.

Defenders should consider proactively blocking traffic to 186.2.175.109 and to the domain name itself, especially in environments where users may be exposed to unsolicited communications. Continuous monitoring of the associated nameservers and any future submissions to reputation services is recommended to detect possible escalation, such as the addition of the domain to more blocklists or the emergence of malicious payloads. Given the limited public visibility, threat‑hunting teams should also query internal logs for DNS queries or HTTP requests to kamino-dex.com and correlate with authentication attempts that may indicate successful credential capture.