kintara-migrate[.]xyz

Analysis of the domain kintara-migrate.xyz indicates a high-risk phishing infrastructure targeting Kintara Therapeutics, a biopharmaceutical company. The domain was registered on July 27, 2026, through OwnRegistrar, Inc., and remains active as of July 28, 2026. It resolves to the IP address 188.114.96.3, which is associated with Cloudflare's network, a common tactic to obscure hosting origins and evade IP-based blocking. The domain is served by Cloudflare nameservers (jacob.ns.cloudflare.com and lina.ns.cloudflare.com), further leveraging the provider's infrastructure for resilience and anonymity. Security vendor detections on VirusTotal show 4 of 91 engines flagging the domain, a modest but notable signal given the domain's recent registration.

The domain appears on three security blocklists, including PhishDestroy, MetaMask, and SEAL, which specialize in phishing and financial fraud detection. The inclusion on MetaMask's blocklist suggests a potential focus on cryptocurrency-related fraud, though the exact nature of the phishing scheme remains unconfirmed without further content analysis. No HTTP status, SSL certificate details, or page title data were provided, limiting insight into the site's operational state or specific lure tactics. Infrastructure analysis reveals a pattern consistent with phishing campaigns: rapid deployment post-registration, use of Cloudflare for obfuscation, and early detection by specialized blocklists.

The domain name itself, incorporating 'kintara-migrate,' implies an attempt to impersonate Kintara Therapeutics, likely exploiting brand recognition to deceive victims. Defenders should treat this domain as active and high-risk, blocking resolution at the DNS level and monitoring for related domains using similar naming conventions. Further investigation into the IP address 188.114.96.3 may reveal additional associated malicious domains.