krak-money[.]pages[.]dev

krak-money.pages.dev is actively engaged in a phishing scam targeting cryptocurrency enthusiasts. The domain is hosted by Cloudflare, Inc. in the United States and is flagged as malicious by 5 out of 91 vendors on VirusTotal. This indicates a significant threat level, further underscored by its inclusion on PhishDestroy's public blocklist.

The site masquerades as a legitimate crypto card guide under the title 'Krak — Crypto Card Guide,' likely aiming to exploit the growing interest in cryptocurrency investments. The domain's platform risk score is notably high at 83 out of 100, suggesting a sophisticated setup designed to deceive unsuspecting users into divulging sensitive information.

Despite being detected by multiple vendors, the domain remains active, leveraging Cloudflare's infrastructure for hosting. Its SSL certificate is issued by Let's Encrypt, a common choice for both legitimate and malicious sites due to its ease of access and cost-free nature. The combination of these elements points to a well-coordinated effort to sustain the phishing operation and evade detection for as long as possible.