kaminofdn[.]fun
“Suspected Misleading Website | Cloudflare”
Resumo das evidências
Analysis of kaminofdn.fun shows a high‑risk brand impersonation campaign targeting the Kamino brand. The domain was registered on April 02, 2026 through HOSTINGER operations, UAB and resolves to IP 185.158.133.1, a server located in Germany (DET FRA). The site returns HTTP 403, but the Cloudflare‑generated page title "Suspected Misleading Website | Cloudflare" is present, indicating that the content is being blocked as potentially deceptive. Infrastructure evidence includes use of Google Trust Services (WE1) SSL certificates and parking‑service nameservers ns1.dns-parking.com and ns2.dns-parking.com. The domain is listed on three security blocklists, has a Gridinsoft trust score of 0/100, and appears in eight AlienVault OTX threat pulses. VirusTotal scans show 5 of 94 security vendors flagging the domain, and it is actively blocked by PhishDestroy, MetaMask, and SEAL. While the actual landing page has not been examined, the combination of a brand‑impersonation label, hostile HTTP response, and multiple independent detections strongly suggests malicious intent. Defenders should immediately block DNS resolution for kaminofdn.fun, add the IP address 185.158.133.1 to deny‑list rules, and monitor for any traffic attempting to contact the domain. Continuous re‑evaluation is advised should the site change its response code or host new content.
Data Coverage
Pipeline de resposta a ameaças
Cobertura de listas de bloqueio
10 fontes externas monitoradas · instantâneo de 13/08/2026
Inteligência de Domínios
Detalhes técnicosDNS, nomes TLS e datas
ICANN OVERSIGHT
Credenciamento e contexto RAA
Credenciamento e contexto RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Análise do VirusTotal
Análise da configuração do site
Você foi afetado por este site?
Se você inseriu credenciais de conta, informações pessoais ou de pagamento, ou baixou um arquivo deste domínio, tome medidas imediatas. Abaixo estão os recursos para ajudá-lo a relatar o incidente e se proteger.
Notifique as autoridades locais
Selecione seu país para obter contactos oficiais do cibercrime ou crie um rascunho de reclamação →.
Verificar qualquer domínio
Análise de ameaças usando lista de bloqueio armazenada, WHOIS, DNS e evidências de verificação pública
Digitalize agoraDenunciar phishing
Envie domínios suspeitos para nosso banco de dados de ameaças — proteja a comunidade
DenunciarFeed de ameaças em tempo real
Relatórios recentes de phishing e alterações de disponibilidade observadas
MonitorarMantenha-se informado, mantenha-se seguro
Monitore ameaças em tempo real ou conteste esta listagem caso acredite que se trate de um falso positivo