# 1-1kr.pages.dev — SUSPICIOUS

> Domain 1-1kr.pages.dev involved in credential theft; 0 of 95 VirusTotal flagged. Investigation ongoing. Avoid sharing sensitive info on this site.

## Summary
The domain 1-1kr.pages.dev has been identified as engaging in credential theft, a specific type of phishing aimed at stealing user login details. Currently, the threat is under investigation but remains active, with no confirmed brand impersonation reported at this time.

Technical intelligence reveals that 1-1kr.pages.dev is registered through Cloudflare, Inc. and resolves to the IP address 188.114.97.3. The domain holds a Let's Encrypt SSL certificate, which may lend it an appearance of legitimacy. VirusTotal analysis shows 0 out of 95 vendors have flagged this domain as malicious so far, indicating that it has not yet been widely detected by automated scanners. No creation date or blocklist count information is available, and trust scores remain undefined, complicating risk quantification.

Given the domain's active status and the specific threat of credential theft, users are advised to avoid entering any sensitive credentials or personal information on 1-1kr.pages.dev. Security teams should monitor this domain for updates, consider adding it to internal blocklists, and educate users about the risks of credential phishing. Further investigation and continuous monitoring are essential to assess emerging indicators of compromise and to mitigate potential data loss.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 188.114.97.3

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/3db1bb2d-cbb7-4dc8-aa88-00a5dbc851f4
- PhishDestroy: https://phishdestroy.io/domain/1-1kr.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/1-1kr.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/1-1kr.pages.dev/
Last updated: 2026-03-26