fingramota[.]kz

The domain fingramota.kz has been identified as a generic phishing threat, masquerading as a platform for financial literacy improvement under the title "FinGramota.kz - Повышение финансовой грамотности населения." This domain was registered through HOSTER.KZ and resolves to the IP address 185.129.95.47, with a creation date of November 29, 2016. PhishDestroy's analysis reveals that while the domain appears legitimate at first glance, its true purpose is to deceive users into divulging sensitive information.

Technical indicators further support the elevated risk level associated with fingramota.kz. VirusTotal reports that 2 out of 95 security vendors flag this domain as malicious, and it appears on 1 security blocklist. The SSL certificate is issued by GoGetSSL / GoGetSSL RSA DV CA, which is a legitimate certificate authority, but this does not preclude the domain from being used for phishing. The domain's long registration history (since 2016) may be an attempt to appear trustworthy, but the current activity suggests compromise or malicious intent.

Currently, fingramota.kz is offline, which mitigates immediate risk. However, the domain could potentially be reactivated by threat actors. Users are advised to avoid any interaction with this domain and to report any attempts to access it. PhishDestroy recommends monitoring for similar domains and staying vigilant against financial-themed phishing campaigns. The remaining risk is low while offline, but constant vigilance is necessary as the domain's infrastructure could be repurposed.