krkken-home-page[.]pages[.]dev

krkken-home-page.pages.dev was registered on 21 February 2026 through Cloudflare, Inc. and is served from the Cloudflare network (AS13335). DNS resolution points to 172.66.44.233, an IP address located in the United States and owned by Cloudflare. The site presents the HTTP status code 403 and returns the page title “Suspected phishing site | Cloudflare”. The TLS certificate is issued by Google Trust Services under the WE1 designation, confirming a valid HTTPS endpoint.

Detected technologies include HTTP/3, HSTS and the Cloudflare edge platform. Google Safe Browsing classifies the domain as a social‑engineering threat. VirusTotal analysis shows that 14 of 93 scanning engines flagged the domain, and the domain appears on a single security blocklist. PhishDestroy has taken the site offline, and Gridinsoft assigns a trust score of 0 / 100.

The domain is currently offline, but the infrastructure footprint remains observable. Evidence does not reveal the specific credential target or any hosted content beyond the generic title; no brand or kit information is available. Defenders should immediately block the domain at DNS and network perimeter, ensure that endpoint protection solutions incorporate the observed detection signatures, and monitor Cloudflare‑hosted IP ranges for re‑registration of similar identifiers. Ongoing telemetry should be collected to detect any resurgence, and threat‑intel feeds should be updated to include the registration details, IP address, and SSL certificate fingerprint for future correlation.