xn--kamno-1sa[.]app

PhishDestroy identifies xn--kamno-1sa.app as an active phishing domain posing a generic phishing threat to unsuspecting users. This domain was flagged with a risk level marked under_investigation but is actively monitored due to its malicious intent. The threat involves deception through impersonation to harvest sensitive credentials or deliver malware. xn--kamno-1sa.app resolves to the IP address 147.45.110.175 and currently evades detection with zero VirusTotal detections out of 95 engines as of seed 52802c. The domain was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED, and employs a Let’s Encrypt SSL certificate to appear legitimate. Registered on April 24, 2026, this domain is newly active, which raises red flags given its lack of reputation and zero detections despite its suspicious activity. No blocklist or trust scores were found supporting its legitimacy. Users encountering xn--kamno-1sa.app should avoid clicking links, downloading files, or entering any personal information. Verify the domain’s legitimacy by cross-checking URLs, ensuring HTTPS encryption, and consulting reputable threat intelligence sources. If this domain was encountered via email or message, report it to the appropriate cybersecurity team or platform provider. Monitor financial accounts and devices for unusual activity, and consider blocking the IP 147.45.110.175 at the network level if necessary to prevent further exposure.