kaminoi[.]finance
“Parked Domain name on Hostinger DNS system”
The domain kaminoi.finance was registered on February 21, 2026 through Hostinger Operations, UAB. It is currently listed as offline but remains a known brand‑impersonation vector targeting the Kamino brand. Automated analysis shows the site presented a generic parking page titled "Parked Domain name on Hostifier DNS system" and served a Let's Encrypt certificate (R13) issued for the domain, indicating the presence of TLS without any extended validation. DNS resolution points to IP address 84.32.84.32, which belongs to AS47583 Hostinger International Limited located in Lithuania.
The host is fronted by Hostinger CDN and advertises support for HTTP/3, while Google Analytics scripts were detected, suggesting basic traffic monitoring capabilities. The domain is flagged by eight of ninety‑three VirusTotal scanners, and it appears on three public blocklists. Specific blocklisting services that have taken action include PhishDestroy, MetaMask, and SEAL. Nameserver records are ns1.dns-parking.com and ns2.dns-parking.com, both typical of parked domains.
Gridinsoft assigned a trust score of 0 out of 100, reinforcing the malicious classification. While the site currently returns no active content beyond the parking message, the infrastructure—particularly the use of a legitimate TLS certificate and reputable CDN—can be leveraged to lend credibility to future malicious campaigns. Defenders should continue to block the domain at perimeter filters, monitor for any changes in HTTP response or content, and correlate any outbound connections to 84.32.84.32 with internal user activity. Updating threat intelligence feeds with the domain’s indicator set and ensuring endpoint protection reflects the eight VirusTotal detections will reduce exposure to potential brand‑impersonation attempts.
Threat Response Pipeline
Public Blocklist Status
Stored Capture
Domain Intelligence
Technical detailsDNS, SSL SANs, timestamps
ICANN OVERSIGHT
Accreditation and RAA context
Accreditation and RAA context
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Technologies · 3 identified
Google Analytics is a free web analytics service that tracks and reports website traffic.
google.com 100% confidenceHTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.
httpwg.org 100% confidenceVirusTotal Analysis
Archived Evidence
Site Performance Analysis
Google PageSpeed Insights — mobile performance audit of kaminoi.finance · checked Mar 2, 2026
Evidence & External Reports
Were You Affected by This Site?
If credentials, payment data, or files were exposed, report the incident immediately. Change affected passwords, revoke active sessions, and scan the device.
Report to Your Local Authorities
Select your country to get official cybercrime contacts, or create a complaint draft →.
Check Any Domain
Threat analysis using stored blocklist, WHOIS, DNS, and public scan evidence
Scan NowReport Phishing
Submit suspicious domains to our threat database — protect the community
ReportLive Threat Feed
Recent phishing reports and observed availability changes
MonitorStay Informed, Stay Safe
Monitor live threats or contest this listing if you believe it's a false positive