kra-ken--log-in[.]pages[.]dev
“Suspected phishing site | Cloudflare”
kra-ken--log-in.pages.dev — Contenu indisponible. Usurpation de l'identité de la marque : Kraken; Type d'arnaque : Crypto Scam. Résumé des preuves: VirusTotal 14/93 (ADMINUSLabs, ChainPatrol, alphaMountain.ai, BitDefender, CyRadar); URLScan malicious verdict; Google Safe Browsing flagged; PhishDestroy score 92/100. Bureau d’enregistrement: Cloudflare.
L’analyse détaillée de PhishDestroy AI reste en anglais afin de préserver le relevé forensique original.
The domain kra-ken--log-in.pages.dev was registered through Cloudflare, Inc. on February 21, 2026 and is hosted on Cloudflare's network (AS13335). DNS resolution points to IP address 172.66.44.133, which is geolocated to the United States and belongs to Cloudflare's edge infrastructure. The domain uses Cloudflare-provided nameservers daphne.ns.cloudflare.com and suullivan.ns.cloudflare.com, and TLS termination is performed by a Google Trust Services certificate (WE1). HTTP requests return a 403 status code and the page title presented by the server is "Suspected phishing site | Cloudflare", indicating that the site has been taken offline or is being blocked by Cloudflare's protective mechanisms.
Security assessments show a Gridinsoft trust score of 0 out of 100, and the site is flagged by Google Safe Browsing for social engineering. It appears on a single security blocklist and has been actively blocked by the PhishDestroy service. VirusTotal analysis reports that 14 of 93 scanning engines flag the domain as malicious, reinforcing the suspicion of malicious intent. The site is classified as a Crypto Scam and explicitly impersonates the cryptocurrency exchange Kraken.
Detected technologies include HTTP/3, HSTS, and Cloudflare's CDN services. Current evidence does not include a content scrape or screenshot, so the exact phishing payload or credential collection mechanisms remain unknown. Defenders should immediately block the domain and its associated IP address at perimeter and DNS layers, add the domain to internal threat intel feeds, and monitor for any related subdomains or similar naming patterns. Continuous observation of Cloudflare edge IP ranges for anomalous activity related to the Kraken brand is advised, as threat actors often leverage shared hosting services to rotate infrastructure quickly.
Processus de réponse aux menaces Pipeline
Statut de la liste de blocage publique
Technologies · 3 identified
HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.
www.rfc-editor.org Confiance à 100 %Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
www.cloudflare.com Confiance à 100 %HTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.
httpwg.org Confiance à 100 %Analyse VirusTotal
Analyse des performances du site
Google PageSpeed Insights — mobile performance audit of kra-ken--log-in.pages.dev · checked Mar 2, 2026
Données factuelles et rapports externes
Ce site vous a-t-il affecté ?
Si vous avez saisi des informations d'identification de compte, des informations personnelles ou de paiement, ou téléchargé un fichier à partir de ce domaine, agissez immédiatement. Vous trouverez ci-dessous des ressources pour vous aider à signaler l'incident et à vous protéger.
Signalez-le à vos autorités locales
Sélectionnez votre pays pour obtenir contacts officiels en matière de cybercriminalité ou créer un projet de plainte →.
Vérifier n'importe quel domaine
Analyse des menaces à l'aide de listes de blocage stockées, de WHOIS, de DNS et de preuves d'analyse publique
Scanner maintenantSignaler une tentative d'hameçonnage
Signalez les domaines suspects à notre base de données des menaces — protégez la communauté
SignalerFlux d'alertes en temps réel
Rapports de phishing récents et changements de disponibilité observés
SurveillerRestez informés, restez en sécurité
Surveillez les menaces en temps réel ou signalez cette alerte si vous pensez qu'il s'agit d'un faux positif