kinctiq[.]xyz

The domain kinctiq.xyz has been identified as a high-risk threat for credential theft. The domain appears to impersonate a legitimate brand, Kinetiq, which could be used to trick users into revealing sensitive information such as login credentials or personal data. There is no indication of a specific drainer kit being used, but the domain's infrastructure and registration details suggest a sophisticated operation.

Infrastructure analysis reveals that kinctiq.xyz has a VirusTotal score of 13/95, indicating that a significant number of security vendors flag this domain as malicious. The domain is registered through NiceNIC International Group Co., Limited and resolves to the IP address 172.67.192.148, which is located in the United States and is part of AS13335 Cloudflare, Inc. The domain was created on February 21, 2026, and currently holds an SSL certificate issued by Google Trust Services / WE1. Additionally, the domain appears on 4 security blocklists and is blocked by PhishDestroy, MetaMask, ScamSniffer, and SEAL.

The domain kinctiq.xyz is currently offline, which may indicate a temporary takedown or a response to the detected threat. Despite the offline status, the infrastructure and registration details remain intact, posing a potential risk of reactivation. Organizations and individuals are advised to monitor for any re-emergence of this domain and to ensure that all relevant security measures are in place to protect against credential theft. This includes educating users about phishing tactics, implementing multi-factor authentication, and regularly updating security policies and procedures.