kenapenex[.]com

The domain kenapenex.com was observed hosting a page titled “SEO优化点击”. The site resolves to the IPv4 address 103.84.87.228, which is allocated to Netsec Limited (AS45753) and geolocated in Hong Kong. Registration details show the domain was created on 18 September 2024 through GoDaddy.com, LLC, using the default GoDaddy nameservers ns39.domaincontrol.com and ns40.domaincontrol.com. No TLS certificate is present, indicating the site was served over plain HTTP. The page has been classified as a social‑media phishing operation, although the exact target brand or credential‑capture page has not been disclosed.

Gridinsoft assigns a trust score of 18 out of 100, reflecting a low reputation. VirusTotal reports that the domain has been scanned by 95 antivirus vendors, none of which currently flag the host, but the absence of detections does not constitute evidence of safety. The domain appears on a single public blocklist and has been actively blocked by the PhishDestroy mitigation service. As of the report date, the site is offline, and the hosting IP is no longer serving content. Analysis indicates that the infrastructure is typical of short‑lived phishing campaigns that rely on inexpensive registration and generic hosting.

The combination of a low trust score, lack of SSL, and a non‑English page title suggests the operators are targeting Chinese‑speaking users, possibly through compromised social‑media accounts. Because the domain can be re‑registered or the IP reused, defenders should continue to monitor the address range associated with AS45753 for new activity, add kenapenex.com to internal deny lists, and enforce strict URL filtering for any HTTP resources that resolve to the same IP. Network defenders are advised to block outbound connections to the IP, while email security teams should flag any messages containing links to the domain.