app-kintara[.]com

This domain, app‑kintara.com, was registered on 12 July 2026 through NICENIC INTERNATIONAL GROUP CO., LIMITED and is currently active. DNS resolution points to the IPv4 address 104.21.35.239, and the authoritative name servers are kip.ns.cloudflare.com and meera.ns.cloudflare.com, indicating use of a commercial DNS provider. The domain is classified as a generic_phishing campaign and is listed with a risk level of under_investigation. VirusTotal records show that the domain has been examined by 91 scanning engines, none of which have raised a detection at the time of analysis; the absence of detections does not imply benign intent. The short lifespan of the domain combined with its immediate deployment suggests a purpose‑built infrastructure for credential harvesting or similar malicious activity. At present, no additional intelligence such as payload samples, phishing page content, or target brand information is publicly available, leaving the exact attack vector and victim profile uncertain. Defenders should treat the domain as hostile: block DNS resolution and HTTP(S) requests to 104.21.35.239, add the domain to intrusion‑prevention and web‑filter policies, and monitor outbound traffic for connections to the associated IP range. Continuous re‑scanning of the domain on threat‑intelligence platforms is recommended to capture any future changes in detection status. Organizations that have observed related phishing attempts should correlate timestamps with the domain’s creation date and consider user‑education campaigns focused on early‑stage phishing indicators.