kenichi-kabu[.]com

Analysis of the domain kenichi-kabu.com confirms its classification as an active brand-impersonation phishing site targeting Amazon. Registered on October 30, 2025, through Global Domain Group LLC, the domain resolves to IP address 45.192.170.145 and presents a page titled 'TikTok Mall,' though the exact content and functionality remain unanalyzed. Technical indicators reveal a Let's Encrypt SSL certificate, which provides encrypted communication but does not validate legitimacy. The domain is flagged by 18 of 95 security vendors on VirusTotal and appears on three security blocklists, including PhishDestroy, InversionDNS, and BLP-Malware. Google Safe Browsing classifies the domain under 'SOCIAL_ENGINEERING,' further corroborating its malicious intent. Infrastructure analysis indicates the domain has been referenced in 25 threat intelligence pulses on AlienVault OTX, suggesting persistent or recurring malicious activity. Despite its creation over eight months ago, the domain remains active as of July 12, 2026, with no evidence of takedown or mitigation. Defenders are advised to block the domain and its associated IP address at the network level. Monitoring for related domains registered through the same registrar or resolving to the same IP may help identify additional threats. Given the high-risk classification and confirmed brand impersonation, organizations should treat this domain as a priority for containment and remediation.