explore-portal-krakeen[.]pages[.]dev

The domain explore-portal-krakeen.pages.dev was registered on 2026-02-21 through Cloudflare, Inc. and resolves to the Cloudflare edge address 188.114.96.3, which is associated with ASN AS13335 (Cloudflare, Inc.) and located in the United States. DNS resolution is served by gabriella.ns.cloudflare.com and dakota.ns.cloudflare.com. The site currently returns HTTP 403 and displays the page title "Suspected phishing site | Cloudflare," indicating that Cloudflare has flagged the host as a potential phishing landing page.

Security analysis shows that 11 of 93 VirusTotal scanners flagged the domain, and the domain appears on one external security blocklist. Gridinsoft assigned a trust score of 0 out of 100, reinforcing the malicious assessment. The site employs HSTS, HTTP/3, and a Google Trust Services / WE1 SSL certificate, all of which are typical of legitimate Cloudflare‑protected sites, but they do not mitigate the underlying credential‑phishing intent.

The domain has been taken offline, and PhishDestroy has listed it as blocked. Given the combination of vendor detections, low trust score, blocklist presence, and the explicit "Credential Phishing" classification, defenders should continue to block the domain at perimeter and endpoint layers, monitor the associated IP address for any re‑use, and consider adding the domain to internal threat‑intel feeds. Ongoing observation of the Cloudflare nameservers for new subdomains tied to this account is advisable, as threat actors may resurrect the campaign using new hostnames under the same registration profile.