kppe[.]pl

Analysis as of July 23, 2026 confirms that kppe.pl is an actively malicious web presence used for generic phishing. The site was registered on February 21, 2026 through the Polish registrar home.pl sp. z o.o. and resolves to the IPv4 address 89.161.185.191, which is announced by AS12824 belonging to home.pl. The HTTP response code is 200, indicating the server is delivering content successfully. The TLS certificate presented is a home.pl DV TLS G2 R35 certificate issued to home.pl S.A., confirming the hosting provider’s involvement but offering no legitimacy for the site’s content. The page title retrieved from the landing page reads "Kancelaria Prawna Prawa Europejskiego Grabowski i Wspólnicy - Start," suggesting an attempt to masquerade as a Polish legal office, although the actual content has not been examined. Technical fingerprinting shows the site runs Joomla coupled with PHP, Bootstrap, and jQuery, a stack commonly leveraged by low‑skill phishing kits.

Reputational signals are strongly negative. Gridinsoft assigns a trust score of 0 out of 100. The domain appears on three independent security blocklists and is actively blocked by PhishDestroy, MetaMask, and SEAL. AlienVault OTX references the domain in seven separate threat‑intel pulses, further corroborating its malicious reputation. VirusTotal scans report that eleven of ninety‑three antivirus engines flagged the site, providing a modest but notable detection rate across the security ecosystem.

While the precise phishing lure (e.g., credential harvesting for a specific service) is not disclosed in the available data, the combination of a legitimate‑sounding Polish law firm title, a recent registration date, and a low‑trust hosting environment points to a high‑confidence phishing operation targeting Polish‑speaking victims. Defenders should immediately block DNS resolution for kppe.pl, enforce URL filtering on corporate proxies, and monitor outbound connections to the associated IP address.