kpa31[.]cc

This report analyzes the domain kpa31.cc, which is classified as a generic phishing threat. The domain is currently offline, indicating it has been taken down or is no longer accessible. No specific brand impersonation was identified in the threat data.

Technical indicators for kpa31.cc include a detection rate of 5 out of 95 security vendors on VirusTotal, placing it in an elevated risk category. The domain is registered through NiceNIC International Group Co., Limited and was created on February 21, 2026. It resolves to IP address 188.114.97.3 and is associated with an SSL certificate from Google Trust Services. Infrastructure analysis reveals the use of Cloudflare Browser Insights, Cloudflare, and HTTP/3 technologies. The domain appears on 3 security blocklists and has a Gridinsoft trust score of 0 out of 100. It is blocked by MetaMask, SEAL, and PhishDestroy. The page title observed was 'Page Not Found — 404', suggesting the phishing content may have been removed or the domain was taken offline before serving malicious payloads.

As the domain is currently offline, the immediate risk is mitigated, but users should remain vigilant. Recommendations include ensuring that any interactions with kpa31.cc are avoided, monitoring for related domains or subdomains that may reappear under the same registrar, and reviewing any credentials or sensitive data that may have been exposed if the domain was accessed prior to takedown. Security teams should add this domain to threat intelligence feeds and blocklists to prevent future access.