kpa28[.]cc

The domain kpa28.cc was registered on March 26, 2026 through NICENIC INTERNATIONAL GROUP CO., LIMITED and is currently active. DNS resolution points to IP address 172.67.192.73, a CDN node situated in Canada. The domain is served over HTTPS using a certificate issued by Google Trust Services under the WE1 identifier, and responds with an HTTP 301 redirect. Page metadata includes the title "KRAKEN kpa28.cc", indicating a brand impersonation attempt targeting Kraken. Security analysis shows that fifteen of ninety-four scanning engines have flagged the domain, and it appears on a single external blocklist. The host is protected by a CDN with support for HTTP/3 and includes browser insight scripts. A trust scoring service assigns a zero‑out‑of‑hundred score. The domain is listed as blocked by at least one anti‑phishing repository. Infrastructure assessment confirms the use of standard CDN nameservers. While the page content has not been publicly examined, the observed indicators—brand‑targeted title, high‑risk classification, multiple vendor detections, and active blocklist status—suggest a malicious impersonation campaign. Defenders should block the domain at network perimeters, monitor DNS queries for the associated IP and nameserver patterns, and flag any user‑initiated connections to the URL for further investigation. Continuous observation of reputation feeds is recommended to capture any changes in the domain's status.