kinolartta[.]com

Analysis of the domain kinolartta.com shows that it was registered on October 24, 2025 through Cloud DNS Ltd and is currently taken offline. The domain resolves to the IPv4 address 149.30.255.186, which is hosted by SonderCloud Limited in Hong Kong under ASN 133199. No TLS certificate is presented for the host, indicating that any HTTP traffic would be unencrypted. The authoritative name servers are pns51.cloudns.net, pns52.cloudns.net, pns53.cloudns.net, and pns54.cloudns.net, all of which are typical of the Cloudns service platform.

Reputation data indicate a Gridinsoft trust score of 0 out of 100, and the domain appears on a single external blocklist. It has also been blocked by the PhishDestroy sinkhole. VirusTotal scans report that 16 of 95 security vendors have flagged the domain, suggesting that multiple detection engines have identified malicious characteristics. AlienVault OTX lists the domain in 15 separate threat‑intel pulses, reinforcing the view that it is being monitored by the broader security community.

No SSL certificate, page title, or explicit brand impersonation information is currently available, so the precise phishing lure cannot be confirmed. Defenders should continue to block the domain at perimeter firewalls and DNS filtering solutions, monitor for any resurgence of activity from the associated IP address, and incorporate the domain’s indicators of compromise into threat‑intel feeds. Given the low trust score, multiple vendor detections, and confirmed presence in OTX pulses, the domain should be treated as high‑confidence malicious and excluded from any allow lists pending further investigation.