kamino-growth[.]com

Analysis on kamino-growth.com indicates that the domain was registered on 21 February 2026 through Dynadot LLC and resolves to IP 91.215.85.190, an address owned by AS200593 PROSPERO OOO in Russia. The site presents no SSL certificate and returns a browser page titled “Privacy error”, suggesting that encrypted traffic is unavailable. The domain is currently offline, so no page content has been captured. Infrastructure data shows the domain is listed on a single security blocklist and has been explicitly blocked by PhishDestroy.

VirusTotal scans report that four of ninety‑five security vendors flagged the domain, reinforcing the assessment of malicious intent. The classification as a brand impersonation targeting the Kamino brand aligns with the provided scam type. Authoritative nameservers are ns1.dyna‑ns.net and ns2.dyna‑ns.net.

While the lack of HTTPS limits immediate payload analysis, the combination of a Russian‑based hosting IP, multiple vendor detections, and the brand‑impersonation label points to a coordinated attempt to deceive Kamino‑related users. Defenders should continue to deny network traffic to 91.215.85.190, enforce DNS blocking for kamino-growth.com, monitor traffic from the associated ASN, and add the domain to internal threat intelligence feeds. Should the site reactivate, further monitoring is required to capture any credential‑phishing pages, malicious downloads, or redirect behavior that may emerge.