When you land on a site like kkpad.lat, the first thing to notice is that it doesn't use HTTPS. That means your browser won't show a padlock, and any information you type — passwords, payment details, even just your name — travels across the internet without encryption. For a site that presumably wants to be taken seriously, this is a fundamental miss. Most reputable websites, even small ones, have had HTTPS for years now.
Then there's the domain age: 15 days. While every legitimate site was new once, a site that combines a fresh domain with no HTTPS, a generic title like 'w-h5,' and a setup that hides its contact information from basic checks is a pattern we see in short-lived scam operations. It does have a legal entity disclosure and privacy policy, which is more than some fly-by-night sites bother with, but those documents lose much of their value when they're delivered over an insecure connection.
The overall picture is of a site that hasn't invested in basic trust signals. Until it adds HTTPS and builds a visible track record, there's little reason to risk using it.