app[.]kodiakifnance[.]run

The domain app.kodiakifnance.run was observed hosting a page titled Kodiak Finance and is currently listed as offline. Registration data shows the domain was provisioned through Cloudflare, Inc., and the resolving address is 188.114.96.3, an IP owned by Cloudflare (AS13335) located in the United States. No SSL certificate is associated with the host, indicating traffic is served over plain HTTP.

Security telemetry indicates the site appears on a single blocklist, specifically PhishDestroy, which has taken action to block the domain. VirusTotal analysis reports that 16 of 95 scanning engines flagged the domain as malicious, providing additional corroboration of its threat profile. Independent reputation scoring from Gridinsoft assigns a trust score of 0 out of 100, reflecting an extremely low confidence rating.

The combination of blocklist inclusion, multiple vendor detections, a zero‑trust score, and lack of encryption suggests the domain was used for a generic phishing operation targeting users interested in “Kodiak Finance.” No further technical artifacts such as phishing kits, credential‑stealing scripts, or additional infrastructure have been disclosed. Defenders should add app.kodiakifnance.run to URL filtering policies, block the associated IP address 188.114.96.3 at the network perimeter, and monitor Cloudflare‑owned ranges for related activity. Because the site is already taken offline, continuous observation of any re‑registration attempts or similar domain patterns is recommended to pre‑empt potential re‑use.