# app.krokon.vip — SUSPICIOUS

> app.krokon.vip was flagged for low-risk phishing and is now offline. Learn how to protect yourself and avoid risks from this domain.

## Summary
PhishDestroy identifies app.krokon.vip as a low-risk phishing domain that was taken offline after being flagged. Although the threat level is low, phishing sites like this can trick users into revealing sensitive information.

This phishing site likely attempted to impersonate a legitimate service to steal credentials or personal data. It appeared on multiple security blocklists and was flagged by one security vendor, indicating suspicious activity.

If you visited app.krokon.vip, avoid sharing any personal details and monitor your accounts for unusual activity. Use updated security software and report any suspicious messages or requests linked to this domain.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: dead (HTTP 0)
- Page title: Krokon

## Domain Intelligence
- Registered: 2026-03-12 15:07:01
- Registrar: Realtime Register B.V.
- Country: NL
- IP: 188.114.97.3
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: lorna.ns.cloudflare.com pablo.ns.cloudflare.com
- SSL Issuer: none

## Detection Status
- VirusTotal: 1 vendors flagged
  Vendors: ["desenmascara.me"]
- Google Safe Browsing: clean
- Blocklists: 3 hits
  Lists: ["PhishDestroy", "MetaMask", "SEAL"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/01985c4a-56ac-7439-81a8-f9628b5841a0.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/def8f006-a63e-4942-8f0e-22274316d3be
- PhishDestroy: https://phishdestroy.io/domain/app.krokon.vip/
- LLM endpoint: https://phishdestroy.io/domain/app.krokon.vip/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/app.krokon.vip/
Last updated: 2026-03-19