kapkaenamelware.xyz
Appeared in the .xyz zone on Friday, October 23, 2026; by the end of that day the census found redirects elsewhere. Full domain report
Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.
Own one of these names and think the listing is wrong? Tell us and a person will look.
What matched
Model opinions
The domain is on Cloudflare nameservers and redirects to its own Cloudflare Access gate (kapkaenamelware.cloudflareaccess.com, with a JWT whose hostname is kapkaenamelware.xyz) showing a 'Kapka Panel' email-OTP login. That is the domain owner protecting a private admin panel, not impersonating Cloudflare. 'Kapka enamelware' reads as the owner's own small business name, not a squat on a known brand.
The domain kapkaenamelware.xyz redirects to a Cloudflare Access login page that impersonates Cloudflare's branding (logo, 'Cloudflare Access' title) to capture email credentials via a form posting to the attacker's infrastructure. The page displays the Cloudflare Access logo and layout but serves a login for 'Kapka Panel'—a classic sealed-room phishing pattern where credentials are harvested through a fraudulent Cloudflare-branded gateway.
A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.
What the page looked like on Friday, October 23, 2026
Same data as JSON: /api/zone/domain/kapkaenamelware.xyz. This page is not indexed by search engines and does not link to the site it describes.