DNS/CDN/frontend hash drift
Kinetiq's assessment for RD-F-105 — scored gray on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
T-09 phase-2 signal. Applicable: yes — kinetiq.xyz is the production frontend. No DNS change or TLS cert change detected via manual check in this assessment. Elevated context: at least 5 active impersonating domains exist (see Cat 11 F161 red finding), making this signal particularly high-value for Kinetiq. External hash monitor not yet deployed. If the official frontend were compromised, user traffic might be redirected to one of the identified impersonator domains — RD-F-105 is the only on-chain-observable warning signal for this attack vector.
Sources #
- URLKinetiq Official WebsiteKinetiq official website kinetiq.xyz — DNS and frontend hash not monitored in this static assessment; manual inspection shows no obvious compromiseretrieved 2026-05-17
Methodology #
Detect whether the hash of production frontend JS changes versus the prior published hash, or a DNS config change is detected.
See the full factor methodology and distribution across all protocols →