kinetiq-foumdation[.]org

This domain, kinetiq-foumdation.org, is identified as a brand impersonation phishing site targeting users by mimicking a legitimate charity foundation. Analysis of the page title, 'Terms of Use | Kinetiq foundation,' suggests an attempt to deceive visitors into believing the site represents an authentic organization, likely to solicit fraudulent donations or distribute malware. No specific drainer kit signatures were detected in initial scans, but the domain exhibits characteristics consistent with phishing infrastructure designed for credential harvesting or financial fraud. Infrastructure analysis reveals the following technical indicators: the domain currently holds a VirusTotal detection score of 0/95, indicating no antivirus engines have flagged it at this time. It was registered through NiceNIC International Group Co., Limited on February 21, 2026, and resolves to the IP address 188.114.97.3. The site employs an SSL certificate issued by Google Trust Services and utilizes Cloudflare with HTTP/3 support, which may obscure its true hosting origin. It appears on one security blocklist (PhishDestroy) and has a Gridinsoft trust score of 0/100, further supporting its classification as malicious. As of the latest assessment, kinetiq-foumdation.org has been taken offline, reducing immediate exposure risk. However, the domain remains registered and could be reactivated or repurposed for future campaigns. Organizations and users are advised to monitor for re-emergence, block the domain and associated IP at network perimeters, and verify charity legitimacy through official channels. The low detection rate underscores the need for proactive threat hunting, as newer phishing domains often evade automated detection initially.