kaminofinance-liquidity-perps[.]pages[.]dev

The domain kaminofinance-liquidity-perps.pages.dev impersonates the financial brand Kamino. It is flagged as malicious by 2 out of 94 vendors on VirusTotal, indicating some level of detection among security services. The site is currently offline, reducing immediate risk, but it is important to note its previous activity.

This domain was hosted on Cloudflare Pages with an IP address located in Canada, under the organization CloudFlare, Inc. The SSL certificate was issued by Google Trust Services, suggesting an attempt to appear legitimate. Despite its offline status, the domain is listed on three public blocklists, including PhishDestroy, MetaMask, and SEAL, reflecting its recognition as a threat by multiple security entities.

The impersonation of Kamino suggests a targeted approach to deceive users into believing they are interacting with a legitimate financial service. The domain's presence on blocklists and its detection by VirusTotal highlight the importance of early threat identification. Although currently inactive, the domain's previous activity serves as a reminder of the persistent nature of phishing threats and the necessity for continuous monitoring and security measures.