# PhishDestroy domain threat record: kako-pl.lat

Content language: English
Canonical HTML report: https://phishdestroy.io/domain/kako-pl.lat/
Machine-readable companion: https://phishdestroy.io/domain/kako-pl.lat/llm.txt

## Summary

PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.

## Stored observations

- Listed by PhishDestroy: yes
- Availability at last stored check: observed active
- First observed by PhishDestroy: 2026-10-21 01:09:47 UTC
- Last availability or vendor check: 2026-10-23 10:37:46 UTC
- Stored record updated: 2026-10-23 18:21:45 UTC
- VirusTotal detections in the stored snapshot: 1/92
- Independent public blocklist matches in the stored snapshot: 0
- Google Safe Browsing stored result: no stored flag

## Stored classification

- Targeted brand: visa

## Stored infrastructure

- Observed IP address: 52.37.165.222
- Registrar in stored WHOIS data: Spaceship, Inc.
- Last stored HTTP status: 200
- Registration date (registry RDAP, kako-pl.lat): 2026-10-13 08:52:28 UTC

## Evidence links

- URLScan report: https://urlscan.io/result/01a15c00-fb08-737a-acdd-0c8617fd7b2a/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/kako-pl.lat
- Certificate Transparency search: https://crt.sh/?q=%25.kako-pl.lat
- Web Archive lookup: https://web.archive.org/web/*/https://kako-pl.lat/

## Corrections

- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq

## Stored PhishDestroy analysis

Overview
PhishDestroy listed kako-pl.lat on 2026-10-21 under a trusted auto‑rule because the domain was newly registered and contained minimal content. The recorded page title describes a Swedish fashion and shoe guide and no phishing or impersonation was observed. An HTTP 200 response was recorded for the domain on the same date.

How the scam works
The current evidence does not point to a specific fraud technique; the domain is flagged as suspicious due to its recent creation and minor detection signals. Without observed malicious behavior, the listing serves as a precaution rather than proof of an active scam.

Evidence
VirusTotal reported one detection and one suspicious label from SOCRadar on 2026-10-21. Google Safe Browsing showed no warning on that date. urlscan’s overall verdict was clean, but its machine‑learning engine flagged the URL as malicious with a high confidence score on 2026-10-21. OTX listed four pulses referencing the domain, and PhishDestroy’s internal blocklist marked it as suspicious on 2026-10-21; external blocklists reported zero matches.

Infrastructure
The domain was registered with Spaceship, Inc. on 2026-10-13. Hosting records show the site resolved to 52.37.165.222, an Amazon.com, Inc. address in the United States, as captured on 2026-10-21. The page employed Cloudflare and common web libraries such as Google Font API, Font Awesome and cdnjs.

What to do
Visitors should avoid submitting login credentials, personal data, or cryptocurrency information on this site until its safety can be confirmed. If credentials were entered, change passwords and monitor accounts for unusual activity. Security teams can add the exact domain to monitoring rules and review access logs for unexpected requests.

Useful links
urlscan.io scan and screenshot: https://urlscan.io/result/01a15c00-fb08-737a-acdd-0c8617fd7b2a/
VirusTotal report: https://www.virustotal.com/gui/domain/kako-pl.lat
Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=kako-pl.lat
Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/
Site owner? Request a review: https://phishdestroy.io/appeals/
Analysis generated: 2026-10-21 03:45:39 UTC

## Stored page captures

- Primary capture: https://i.ibb.co/kRZmGtW/9178947b28c9.png
  Captured: 2026-10-21 01:09:47 UTC
- URLScan capture: https://screenshots.phishdestroy.io/01a15c00-fb08-737a-acdd-0c8617fd7b2a.png
  Captured: 2026-10-21 01:09:47 UTC
  Source report: https://urlscan.io/result/01a15c00-fb08-737a-acdd-0c8617fd7b2a/
- Cloudflare Radar: https://screenshots.phishdestroy.io/cf/85720564-7072-4f4a-b56f-f5fb7e3bb036.png
  Captured: 2026-10-21 01:40:09 UTC
  Source report: https://radar.cloudflare.com/scan/85720564-7072-4f4a-b56f-f5fb7e3bb036
  SHA-256: 84bde2c44a1e9f563b073639a9c52afeb09e847862dea0a30f09294d44af2923
- URLScan · 2026-10-21: https://screenshots.phishdestroy.io/us/01a15bf9-5d9d-71c6-aa93-9f414fb15ad9.png
  Captured: 2026-10-21 01:00:39 UTC
  Source report: https://urlscan.io/result/01a15bf9-5d9d-71c6-aa93-9f414fb15ad9/
  SHA-256: 852fa28e56d0186e3b2ec07c0eed128dfd7a37e839642d5cb859c82f749d600c
- URLScan · 2026-10-21: https://screenshots.phishdestroy.io/us/01a15bfc-548f-7459-936a-e9ff356629e8.png
  Captured: 2026-10-21 01:03:53 UTC
  Source report: https://urlscan.io/result/01a15bfc-548f-7459-936a-e9ff356629e8/
  SHA-256: 852fa28e56d0186e3b2ec07c0eed128dfd7a37e839642d5cb859c82f749d600c
- URLScan · 2026-10-21: https://screenshots.phishdestroy.io/us/01a15bfc-c38e-7025-845d-589861160e5c.png
  Captured: 2026-10-21 01:04:22 UTC
  Source report: https://urlscan.io/result/01a15bfc-c38e-7025-845d-589861160e5c/
  SHA-256: 852fa28e56d0186e3b2ec07c0eed128dfd7a37e839642d5cb859c82f749d600c

## Collected source observations

Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
    "urlscan": {
        "v": 1,
        "fetched_at": "2026-10-21T01:40:25Z",
        "uuid": "01a15c00-fb08-737a-acdd-0c8617fd7b2a",
        "scanned_at": "2026-10-21T01:08:58Z",
        "final_url": "https://kako-pl.lat/",
        "status": 200,
        "redirected": "https-only",
        "redirects": [
            {
                "to": "https://kako-pl.lat/",
                "from": "http://kako-pl.lat/",
                "status": 307
            }
        ],
        "ip": "52.37.165.222",
        "ptr": "ec2-52-37-165-222.us-west-2.compute.amazonaws.com",
        "domains": [
            "cdnjs.cloudflare.com",
            "fonts.gstatic.com",
            "public.readdy.ai",
            "fonts.googleapis.com",
            "static.readdy.ai",
            "readdy.ai"
        ],
        "ips": [
            "13.33.67.70",
            "142.250.190.227",
            "13.32.241.32",
            "104.17.25.14",
            "64.233.180.95",
            "52.37.165.222"
        ],
        "asns": [
            "16509",
            "15169",
            "13335"
        ],
        "countries": [
            "US"
        ],
        "link_domains": [
            "luxuryspreadsheet.com"
        ],
        "doc_hash": "d29621dd7e7ea99d30a637c63c4afc0d41a60d79b9c4293a4c7892d5a7b865a0",
        "script_hashes": [
            "b732db77d6c2360d13b30a52426f3e892a3c9138cd4d20a514beb7d9cdcc43a7"
        ],
        "globals": [
            "EventReporting",
            "__eventReporting",
            "__READDY_PUBLIC_PROJECT_CONFIG_REQUESTS__",
            "__reactRouterVersion",
            "REACT_APP_NAVIGATE"
        ],
        "storage_keys": [
            "readdy_session_id",
            "readdy_device_id",
            "i18next.translate.boo",
            "i18nextLng"
        ],
        "tls": {
            "san": [
                "kako-pl.lat"
            ],
            "cipher": "AES_128_GCM",
            "issuer": "YE2",
            "subject": "kako-pl.lat",
            "protocol": "TLS 1.3",
            "valid_to": "2027-01-11T23:59:22Z",
            "valid_from": "2026-10-13T23:59:23Z"
        },
        "domain_age_days": 6,
        "apex_age_days": 6,
        "tls_age_days": 7,
        "tls_valid_days": 89,
        "requests": 15,
        "verdicts": {
            "engines": {
                "tags": [
                    "urlscan-ml",
                    "urlscan-ml-60c5e22"
                ],
                "score": 94,
                "malicious": true
            },
            "overall": {
                "score": 0,
                "malicious": false
            }
        },
        "headers": {
            "content-type": "text/html; charset=utf-8"
        }
    },
    "cf": {
        "v": 1,
        "fetched_at": "2026-10-21T01:40:28Z",
        "uuid": "85720564-7072-4f4a-b56f-f5fb7e3bb036",
        "scanned_at": "2026-10-21T01:40:09Z",
        "final_url": "https://kako-pl.lat/",
        "status": 200,
        "history": [
            {
                "url": "https://kako-pl.lat/",
                "status": 200
            }
        ],
        "dom_hash": "ee03ae3140fb0b5f1d1a97d1c88609e0fcb14178cbb63d092064b5f4721867ed",
        "doc_hash": "d0b5d3934f01a90ed31b8adf557f7ddb236c7d0085ff0c79761afc3920299699",
        "domain_risks": [
            "New Domains",
            "Security Risks",
            "Newly Seen Domains"
        ],
        "radar_rank": {
            "bucket": ">200000"
        },
        "dns": [
            {
                "name": "kako-pl.lat",
                "type": "A",
                "value": "52.37.165.222"
            }
        ],
        "dnssec_valid": true,
        "ip": "52.37.165.222",
        "whois": {
            "registrar": "Spaceship, Inc.",
            "created": "2026-10-13T08:52:28Z",
            "updated": "2026-10-13T08:52:31Z",
            "expires": "2027-10-13T23:59:59Z",
            "nameservers": [
                "launch2.spaceship.net",
                "launch1.spaceship.net"
            ]
        }
    },
    "vt": {
        "v": 1,
        "fetched_at": "2026-10-21T03:44:40Z",
        "analysis_at": "2026-10-21T03:08:36Z",
        "stats": {
            "timeout": 0,
            "harmless": 55,
            "malicious": 0,
            "suspicious": 1,
            "undetected": 36
        },
        "detections": {
            "SOCRadar": "suspicious"
        },
        "reputation": 0,
        "registrar": "Spaceship, Inc.",
        "created": "2026-10-13T08:52:28Z",
        "expires": "2027-10-13T23:59:59Z",
        "updated": "2026-10-13T08:52:31Z",
        "first_seen": "2026-10-18T17:27:54Z",
        "dns": [
            {
                "ttl": 60,
                "type": "A",
                "value": "52.37.165.222"
            },
            {
                "ttl": 1800,
                "type": "NS",
                "value": "launch2.spaceship.net"
            },
            {
                "ttl": 1800,
                "type": "SOA",
                "rname": "support.spaceship.com",
                "value": "launch1.spaceship.net"
            },
            {
                "ttl": 1800,
                "type": "NS",
                "value": "launch1.spaceship.net"
            }
        ],
        "dns_at": "2026-10-21T03:17:30Z",
        "jarm": "40d40d40d00000000043d43d00043d6aff5ab0f4fc31897186312c9e639319",
        "cert": {
            "san": [
                "kako-pl.lat"
            ],
            "issuer": "Let's Encrypt / YE2",
            "serial": "558e0a42a04eb2c02b35a53ecdb0a64578f",
            "sha256": "1080c87a8c411e9dd5eefba83e7d202fbb2290e5ebdba02249b41336a173b2a2",
            "subject": "kako-pl.lat",
            "valid_to": "2027-01-11T23:59:22Z",
            "valid_from": "2026-10-13T23:59:23Z"
        },
        "whois": {
            "registrar": "Spaceship, Inc.",
            "registrar_iana_id": "3862",
            "registrar_url": "https://www.spaceship.com/",
            "created": "2026-10-13T08:52:28Z",
            "updated": "2026-10-13T08:52:31Z",
            "expires": "2027-10-13T23:59:59Z",
            "status": [
                "clientTransferProhibited",
                "serverTransferProhibited"
            ],
            "nameservers": [
                "launch1.spaceship.net",
                "launch2.spaceship.net"
            ],
            "dnssec": "signedDelegation"
        }
    },
    "webcheck": {
        "v": 1,
        "fetched_at": "2026-10-21T01:24:06Z",
        "mail_config": {
            "spf_lookups": 0
        },
        "caa_records": {
            "domain": "kako-pl.lat"
        },
        "block_lists": {
            "resolvers": 12,
            "blocked_count": 0
        },
        "archives": {
            "last": "2026-10-21T01:11:12Z",
            "first": "2026-10-14T08:09:11Z",
            "changes": 1,
            "days_archived": 2,
            "scans_per_day": 0.15,
            "avg_page_bytes": 1268
        },
        "robots_txt": {
            "agents": [
                "*"
            ],
            "present": true,
            "sitemaps": [
                "https://kako-pl.lat/sitemap.xml"
            ]
        },
        "sitemap": {
            "present": true,
            "url_count": 21
        },
        "social_tags": {
            "ogUrl": "https://kako-pl.lat/",
            "title": "Kakobuy Spreadsheet – guide på svenska för mode och skor",
            "ogType": "website",
            "robots": "index, follow",
            "ogImage": "https://public.readdy.ai/ai/img_res/73a489e04a3306cebeb9003f100df835.webp",
            "ogTitle": "Kakobuy Spreadsheet – guide på svenska för mode och skor",
            "keywords": "kakobuy spreadsheet, kakobuy, mode, väskor, sneakers, storleksguide, Sverige",
            "ogSiteName": "kako-pl.lat",
            "description": "Lär dig använda ett kakobuy spreadsheet inför ditt köp: välj bland tolv kategorier, kontrollera storlekar, planera budget i SEK och läs 20 kostnadsfria guider.",
            "twitterCard": "summary_large_image",
            "canonicalUrl": "https://kako-pl.lat/",
            "ogDescription": "Lär dig använda ett kakobuy spreadsheet: välj bland tolv kategorier, kontrollera storlekar och planera budget i SEK."
        },
        "trackers": {
            "requests": 14,
            "trackers": [
                {
                    "name": "Cloudflare",
                    "company": "Cloudflare",
                    "country": "US",
                    "category": "Hosting",
                    "requests": 3
                },
                {
                    "name": "Google Fonts",
                    "company": "Google",
                    "country": "US",
                    "category": "Hosting",
                    "requests": 2
                },
                {
                    "name": "Google Static",
                    "company": "Google",
                    "country": "US",
                    "category": "Hosting",
                    "requests": 2
                }
            ]
        },
        "mixed_content": {
            "no_sri": [
                "https://public.readdy.ai/analysis/event-reporting.min.js"
            ],
            "third_party_scripts": 1
        },
        "status": {
            "up": true,
            "code": 200,
            "timings": {
                "dns": 200,
                "tls": 202,
                "wait": 207,
                "connect": 174,
                "download": 0
            },
            "response_ms": 783
        },
        "tls_connection": {
            "alpn": "h2",
            "cipher": "TLS_AES_128_GCM_SHA256",
            "protocol": "TLSv1.3",
            "versions": [
                "TLSv1.2",
                "TLSv1.3"
            ],
            "authorized": true,
            "forward_secrecy": true
        },
        "ports": {
            "open": [
                80,
                443
            ]
        },
        "carbon": {
            "bytes": 3166,
            "co2_grams": 0.0001,
            "cleaner_than": 95
        },
        "dns_server": {
            "ns": [
                {
                    "ip": "162.159.27.32",
                    "host": "launch2.spaceship.net"
                },
                {
                    "ip": "162.159.26.38",
                    "host": "launch1.spaceship.net"
                }
            ],
            "zone": "kako-pl.lat"
        },
        "location": {
            "ip": "52.37.165.222",
            "asn": "16509",
            "org": "Amazon.com, Inc.",
            "city": "Boardman",
            "country": "US"
        },
        "ssl": {
            "issuer": "Let's Encrypt / YE2",
            "subject": "kako-pl.lat"
        },
        "dns": {
            "A": [
                "52.37.165.222"
            ],
            "NS": [
                "launch2.spaceship.net",
                "launch1.spaceship.net"
            ],
            "SOA": "{\"nsname\": \"launch1.spaceship.net\", \"hostmaster\": \"support.spaceship.com\", \"serial\": 1791939460, \"refresh\": 43200, \"retry\": 3600, \"expire\": 604800, \"minttl\": 3600}"
        },
        "dnssec": {
            "ds": true,
            "rrsig": true,
            "dnskey": true
        },
        "hsts": {
            "message": "Site does not serve any HSTS headers."
        },
        "http_security": {
            "xFrameOptions": false,
            "referrerPolicy": false,
            "xXSSProtection": false,
            "permissionsPolicy": false,
            "xContentTypeOptions": false,
            "contentSecurityPolicy": false,
            "strictTransportPolicy": false,
            "crossOriginOpenerPolicy": false,
            "crossOriginEmbedderPolicy": false,
            "crossOriginResourcePolicy": false
        },
        "get_ip": {
            "ip": "52.37.165.222",
            "family": 4
        },
        "redirects": {
            "chain": [
                "https://kako-pl.lat"
            ]
        },
        "tech_stack": {
            "technologies": [
                "Cloudflare",
                "Google Font API",
                "Font Awesome",
                "cdnjs",
                "Open Graph"
            ]
        },
        "whois": {
            "registrar": "Spaceship, Inc.",
            "created": "2026-10-13T08:52:28Z",
            "updated": "2026-10-13T08:52:31Z",
            "expires": "2027-10-13T23:59:59Z",
            "status": [
                "serverTransferProhibited https://icann.org/epp",
                "clientTransferProhibited https://icann.org/epp"
            ],
            "nameservers": [
                "launch2.spaceship.net",
                "launch1.spaceship.net"
            ]
        },
        "headers": {
            "headers": {
                "content-type": "text/html; charset=utf-8"
            }
        }
    }
}
```