kodiak-finance[.]app
“Kodiak Finance: Unlocking New Potential in Decentralized Finance”
kodiak-finance.app — Contenido no disponible. Suplantación de marca: ["berachain"]. Resumen de las pruebas: VirusTotal 13/95 (alphaMountain.ai, AlphaSOC, BitDefender, CyRadar, ESET); PhishDestroy score 89/100. Registrador: Web Commerce Communica….
El análisis detallado de PhishDestroy AI se mantiene en inglés para conservar el registro forense original.
Analysis of the domain kodiak-finance.app, taken offline on July 25, 2026, identifies it as a phishing site targeting decentralized finance (DeFi) users. The page title, 'Kodiak Finance: Unlocking New Potential in Decentralized Finance,' suggests an attempt to impersonate a legitimate DeFi platform to harvest credentials or wallet details. Infrastructure analysis reveals Cloudflare nameservers (dahlia.ns.cloudflare.com, trevor.ns.cloudflare.com) and resolution to 178.16.53.184, hosted on AS202412 (Omegatech LTD, NL). No SSL certificate was present, increasing the risk of interception during credential submission.
The domain was flagged by PhishDestroy and appears on one security blocklist. AlienVault OTX recorded a single threat intelligence pulse referencing this domain, while 13 of 95 security vendors on VirusTotal detected it as malicious. Registration was conducted through Web Commerce Communications Limited. Defenders should treat this domain as compromised and prioritize blocking both the domain and its resolved IP.
Given the absence of SSL and the use of a hosting provider frequently associated with malicious activity, network-level protections should be enforced. Further investigation into associated wallet addresses or transaction patterns may reveal additional indicators of compromise. The exact phishing kit or payload remains unconfirmed, but the DeFi-themed lure aligns with common credential harvesting tactics.
Proceso de respuesta ante amenazas Pipeline
Estado de la lista de bloqueados pública
Captura guardada
Inteligencia de dominios
Detalles técnicosDNS, SAN de SSL, marcas de tiempo
ICANN OVERSIGHT
Acreditación y contexto RAA
Acreditación y contexto RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Análisis de VirusTotal
Datos y informes externos
¿Te ha afectado esta página web?
Si ingresó credenciales de cuenta, información personal o de pago, o descargó un archivo de este dominio, tome medidas inmediatas. A continuación encontrará recursos que le ayudarán a informar el incidente y protegerse.
Informa a las autoridades locales
Seleccione su país para obtener contactos oficiales de cibercrimen o crear un borrador de queja →.
Comprobar cualquier dominio
Análisis de amenazas utilizando listas de bloqueo almacenadas, WHOIS, DNS y evidencia de escaneo público
Escanear ahoraDenunciar un intento de phishing
Envía los dominios sospechosos a nuestra base de datos de amenazas: protege a la comunidad
DenunciarFlujo de amenazas en tiempo real
Informes de phishing recientes y cambios de disponibilidad observados
MonitorizarMantente informado, mantente a salvo
Supervisa las amenazas en tiempo real o impugna esta entrada si crees que se trata de un falso positivo.