Phishing detection: id-kraken-controle.com

Kraken
https://id-kraken-controle.com/login_a8f2k9m.php Access site
Screenshot
Screenshot of id-kraken-controle.com
Investigate
Domain id-kraken-controle.com2 CT hosts on apex
urlscan page.domain VirusTotal Whois

See every phishunt record for this domain

IP 172.86.117.128
urlscan page.ip VirusTotal ipinfo Greynoise
URL https://id-kraken-controle.com/login_a8f2k9m.php
urlscan Wayback archive.today
Cert -
crt.sh Censys Google CT
Phishunt analysis Beta
45 high suspicion likely_phishingheuristic risk score · not a probability
Why?
  • +6.1 Google Safe Browsing
  • +5.3 Keyword match
  • +4.0 Young domain
  • +3.2 Brand favicon
  • +3.0 OpenPhish
  • +1.1 ASN reputation
  • +1.1 No CSP header
  • +1.1 No HSTS header
  • +1.0 Site cluster
  • +0.9 No registrar lock
  • +0.7 Bulletproof DNS
  • +0.6 Brand impersonation in path
  • +0.5 Long domain
  • +0.4 Credential path
  • +0.2 Executable page
  • +0.2 Hyphens
  • +0.2 Suspicious TLD
  • Boosted to 45: Google-flagged credential form
19 signals fired · detector v3.0.0
AI analysis AIBeta
Credential harvesting

Impersonates Kraken cryptocurrency exchange with a PHP login page at a suspicious obfuscated path. No valid TLS certificate is present. Confirmed malicious by Google Safe Browsing and OpenPhish, hosted by RouterHosting LLC.

Google Safe BrowsingExecutable pageOpenPhish
AI-generated from stored detector signals - the AI never visited the site. · 2026-08-27 · confidence 85%
Domain & Network
Whois
Registrar Dynadot Inc
Network
IP 172.86.117.128
Country United StatesUnited States
Hosting RouterHosting LLC
ASN AS14956
TLS Cert -
External detection Google Safe Browsing OpenPhish
GSB category: SOCIAL_ENGINEERING
CleanPhishTank · TweetFeed · urlscan.io
Report this phishing
Registrar Dynadot Inc
abuse@dynadot.com
Submit to blocklists
Google Safe Browsing Microsoft SmartScreen APWG PhishTank
Not phishing? Dispute this detection

Tracked from 2026-08-27 01:08 UTC  ·  Last refreshed 2026-08-27 15:30 UTC