VirusTotal
6 / 95
“Sign in to Kraken - Kraken | Buy, Sell and Margin Trade Bitcoin”
portal-krqakn.framer.website — 内容不可用 (HTTP 404). 品牌冒充:Kraken; 诈骗类型:Crypto Scam. 证据摘要: VirusTotal 6/95 (ChainPatrol, alphaMountain.ai, Chong Lua Dao, Google Safebrowsing, Lionic); Google Safe Browsing flagged; PhishDestroy score 85/100. 注册商: CSC.
为保留原始取证记录,下方的 PhishDestroy AI 详细分析仍使用英文。
This domain, portal-krqakn.framer.website, operates as a fraudulent login portal impersonating Kraken, a well-known cryptocurrency exchange. The site is designed to harvest user credentials by presenting a near-identical copy of Kraken’s sign-in interface, tricking visitors into entering sensitive account details. Such brand impersonation schemes often lead to unauthorized account access, financial theft, or further exploitation through phishing campaigns. The page title, 'Sign in to Kraken - Kraken | Buy, Sell and Margin Trade Bitcoin,' reinforces the deception by mimicking legitimate Kraken branding and functionality descriptions. Analysis indicates this domain was created on November 19, 2021, and is registered through CSC Corporate Domains, Inc. Infrastructure review reveals it resolves to the IP address 52.223.52.2 and employs a Let’s Encrypt SSL certificate, which, while encrypting traffic, does not validate the site’s legitimacy. Security vendors on VirusTotal have flagged this domain as malicious, with 6 out of 95 engines detecting it as a threat. Additionally, Google Safe Browsing categorizes the site under 'SOCIAL_ENGINEERING,' and it appears on one security blocklist, further confirming its fraudulent nature. Technologies detected include Framer Sites, React, HSTS, and HTTP/3, which are commonly used in both legitimate and malicious web applications. If you visited portal-krqakn.framer.website or entered any credentials, immediate action is required. First, cease all interaction with the site and do not provide any additional information. Change the passwords for your Kraken account and any other platforms where the same credentials may have been reused. Enable multi-factor authentication (MFA) on all critical accounts to add an extra layer of security. Monitor your accounts for unauthorized transactions or suspicious activity, and report any anomalies to the legitimate service provider. Consider running a security scan on your device to check for malware or other threats that may have been introduced during the visit.
针对该主机的爬虫与浏览器观察记录,以及针对“Keitaro”式流量分配系统的实时指纹检测。
Framer/af6a429扫描说明: hosting_placeholder: raw=placeholder; http=404; via=https_proxy; server=Framer/af6a429
ns-1243.awsdns-27.orgns-1818.awsdns-35.co.ukns-336.awsdns-42.comns-792.awsdns-35.netLocation describes the IP network.
b3445573cc07ede57a843d22babf8e3b977a95a08dd21a6706de7226e732d6ceSaved certificate metadata. Certificate dates without a timezone are shown as stored. Transport encryption does not establish that the site is trustworthy.
Google PageSpeed Insights — mobile performance audit of portal-krqakn.framer.website · checked Jun 27, 2026
15 recorded events. These records describe collected evidence, outgoing notifications and publication; they do not confirm a complete investigation or a takedown.
We scan suspicious URLs, inspect public results and send evidence through the appropriate abuse-reporting channels. The dated events above show what is recorded for this domain. The directory below explains the wider workflow.
Capture the rendered page, requests and visible infrastructure.
Compare the available engine results and retain the analysis timestamp.
Check whether Google currently lists the URL as unsafe.
Inspect a public scan and its recorded network and classification data.
Look for indicator references and related community intelligence.
Compare archived captures and preserve historical context.
Look for matching indicators and associated threat records.
Inspect certificate records and related hostnames.
Compare security resolver responses and record observed blocking.
Inspect the public DNS, TLS, HTTP and technology surface.
Security services used for scanning, reputation checks and reporting are listed below. A service being listed is not evidence that it received, accepted or acted on this particular domain. Recorded submissions appear in the notification history above.
已存储 114 个仿冒域名
显示 114 个中的 100 个
由 1 名社区成员报告;首次发现于 2025年11月29日
如果您输入了帐户凭据、个人或付款信息,或者从此域下载了文件,请立即采取措施。以下资源可帮助您报告事件并保护自己。
选择您所在的国家/地区以获取 官方网络犯罪联系人 或 创建投诉草稿 →。
Template-based draft · optional AI wording assistance requires separate consent