# kra--ken-login.pages.dev — MALICIOUS

> kra--ken-login.pages.dev is a high-risk credential phishing site flagged for social engineering. Stay safe and avoid entering personal info.

## Summary
PhishDestroy identifies kra--ken-login.pages.dev as a high-risk credential phishing domain designed to steal user information. The threat involves deceptive tactics aimed at capturing login credentials.
The domain was registered via Cloudflare in early 2026 and is flagged by Google Safe Browsing for social engineering. It appears on multiple security blocklists, and 15 security vendors reported malicious activity on VirusTotal.
Currently, kra--ken-login.pages.dev has been taken offline, reducing immediate risk. Users should remain cautious and avoid providing credentials on suspicious pages.

## Threat Details
- Verdict: MALICIOUS
- Site status: dead (HTTP 403)
- Target brand: Kraken
- Page title: Suspected phishing site | Cloudflare

## Domain Intelligence
- Registered: 2026-02-21 07:01:08
- Registrar: Cloudflare, Inc.
- Country: US
- IP: 172.66.45.46
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: ["ruben.ns.cloudflare.com", "vita.ns.cloudflare.com"]
- SSL Issuer: Google Trust Services / WE1

## Detection Status
- VirusTotal: 15 vendors flagged
  Vendors: ["ADMINUSLabs", "ChainPatrol", "alphaMountain.ai", "BitDefender", "CyRadar", "ESET", "Emsisoft", "Fortinet", "G-Data", "Google Safebrowsing", "Lionic", "Netcraft", "Sophos", "VIPRE", "Webroot"]
- Google Safe Browsing: FLAGGED
- Blocklists: 2 hits
  Lists: ["PhishDestroy", "MetaMask"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019c984a-8e49-77d7-bcc0-1eed111df888.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/053bb915-73cd-4ae8-9dd4-30f82197f1da
- PhishDestroy: https://phishdestroy.io/domain/kra--ken-login.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/kra--ken-login.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/kra--ken-login.pages.dev/
Last updated: 2026-03-19