app-gitikraken[.]pages[.]dev

app-gitikraken.pages.dev is currently classified as a generic phishing site with an elevated risk rating. The domain is hosted on Cloudflare’s infrastructure; registration information indicates Cloudflare, Inc. as the registrar and the authoritative nameservers are clayton.ns.cloudflare.com and gigi.ns.cloudflare.com. DNS resolution maps the domain to the IPv4 address 188.114.97.3, which is the sole host observed for this indicator. The domain has been observed on a single security blocklist and is actively blocked by the PhishDestroy filtering service, confirming that at least one commercial anti‑phishing platform has taken mitigation action.

VirusTotal analysis shows that eight of ninety‑one scanning engines have raised detections against the domain, demonstrating a modest but non‑trivial level of consensus among malware‑ and phishing‑focused vendors. No additional metadata such as SSL certificate details, HTTP response codes, page title, or Safe Browsing entries are provided, so the precise content and response behavior of the site remain unknown. Likewise, there is no public attribution to a specific phishing kit or campaign, and the limited blocklist presence suggests that broader ecosystem visibility may be pending. Given the confirmed resolution to a Cloudflare‑owned IP, defenders should treat traffic to this domain as hostile.

Network perimeter controls should deny or quarantine connections to 188.114.97.3, and DNS filtering policies should be updated to block the FQDN app‑gitikraken.pages.dev. Endpoint protection platforms should be instructed to apply the eight VirusTotal detections as indicators of compromise, and any existing email or web gateway allow‑lists should be reviewed for inadvertent exposure. Continuous monitoring of the domain’s reputation across additional intelligence sources is advised, as further detections or blocklist additions may emerge.