MALICIOUS — CRITICAL
kr-aken[.]com
12 of 91 security engines flagged the domain; 2 public blocklists listed it (MetaMask, SEAL); the latest stored check returned HTTP 308.
- VirusTotal
- 12/91
- Blocklists
- 2 · MetaMask, SEAL
- Ketersediaan
- Terakhir diketahui aktif · HTTP 308
Do not enter credentials, seed phrases, payment details, or personal information on this domain.
Notification and current-status evidence
The sent-report ledger records the first outgoing report at .
The recorded recipient is domainabuse@tucows.com.
The latest stored availability evidence still shows the domain reachable; 23 days has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
Jump to section
kr-aken.com — Terakhir diketahui aktif (HTTP 308). Peniruan identitas merek: Kraken; Jenis penipuan: Credential Phishing. Ringkasan bukti: VirusTotal 12/91 (ChainPatrol, alphaMountain.ai, BitDefender, CRDF, CyRadar); URLQuery 4 alerts; 2 external blocklist matches (MetaMask, SEAL); PhishDestroy score 100/100. Registrar: TUCOWS.COM, CO.
Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.
Evidence Digest
kr-aken.com is classified critical with an evidence score of 100/100. 12 of 91 security engines flagged the domain; 2 public blocklists listed it (MetaMask, SEAL). Registered 7 Jul 2026 via TUCOWS.COM, CO., hosted on 188.114.97.3 (Cloudflare, Inc., CA). The latest stored check on 9 Aug 2026 returned HTTP 308 and includes a capture. 1 outgoing abuse report is recorded, most recently on 17 Jul 2026.
Stored generated summary (templated)cerebras · 16/07/2026
Retained for the record. This text repeats stored detection facts and is not presented as authored analysis.
The domain kr-aken.com was registered on July 07, 2026 through TUCOWS.COM, CO. It is currently delegated to Cloudflare nameservers archer.ns.cloudflare.com and thea.ns.cloudflare.com, and resolves to the IP address 188.114.97.3. VirusTotal analysis shows that 2 of 91 security vendors have flagged the domain, indicating a minimal but non‑zero detection rate. The intelligence categorizes the domain as a generic phishing threat with a high risk rating and confirms that the site remains active. Infrastructure data suggests the use of a reputable CDN provider, which can obscure the true hosting location and complicate attribution. No additional context such as page titles, brand targeting, or phishing kit details is available, leaving the specific lure and victim profile uncertain. Defenders should block DNS resolution to 188.114.97.3, monitor for any outbound connections to that address, and apply email filtering rules to detect URLs containing kr-aken.com. Continuous re‑scanning on multi‑engine platforms is advised to capture any changes in detection status.
Cakupan data12 recorded checks
Intelijen Keamanan Jaringan
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Hagezi Threat Feed | www.kr-aken.com |
malicious | Sinkholed |
| Quad9 DNS | www.kr-aken.com |
malicious | Sinkholed |
| Hagezi Threat Feed | kr-aken.com |
malicious | Sinkholed |
| Quad9 DNS | kr-aken.com |
malicious | Sinkholed |
Alur Tanggapan Ancaman Pipeline
Status Daftar Blokir Publik
Tangkapan tersimpan
Intelijen Domain
Rincian teknisDNS, SAN SSL, cap waktu
ICANN OVERSIGHT
Akreditasi dan konteks RAA
Akreditasi dan konteks RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Teknologi · 9 identified
Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.
nodejs.org Keyakinan 100%React is an open-source JavaScript library for building user interfaces or UI components.
reactjs.org Keyakinan 100%Next.js is a React framework for developing single page Javascript applications.
nextjs.org Keyakinan 100%HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.
www.rfc-editor.org Keyakinan 100%Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.
www.cloudflare.com Keyakinan 100%Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
www.cloudflare.com Keyakinan 100%HTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.
httpwg.org Keyakinan 100%Analisis VirusTotal
Bukti & Laporan EksternalIndependent lookups and source reports
PD-20260717-FA2636 Recipient: domainabuse@tucows.com Victim safety and official reportingImmediate actions and verified reporting channels
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.