help.kraken-tor.co.com

Kraken

https://help.kraken-tor.co.com Access site

Screenshot

Investigate

Domain help.kraken-tor.co.com6 CT hosts on apex

urlscan

page.domain

VirusTotal

Whois

IP 172.67.173.20

urlscan

page.ip

VirusTotal

ipinfo

Greynoise

URL https://help.kraken-tor.co.com

urlscan

Wayback

archive.today

Cert WE1

crt.sh

Censys

Google CT

Phishunt analysis Beta

34 medium suspicion suspiciousheuristic risk score · not a probability

Why?

+6.1 Google Safe Browsing
+5.3 Keyword match
+5.1 Site cluster
+4.1 Brand in screenshot
+3.7 Brand in domain label
+1.8 ASN reputation
+1.6 Favicon (kit)
+1.1 No CSP header
+1.1 No HSTS header
+0.7 Brand in cert SAN
+0.7 Unrecognised DNS provider
+0.6 Registrar reputation
+0.6 Suspicious TLD
+0.5 Young certificate
+0.5 Long domain
+0.3 Free CA
+0.3 Deep subdomain
+0.1 Hyphens

19 signals fired · detector v3.0.0

AI analysis AIBeta

Credential harvesting

Kraken crypto exchange impersonation posing as a support page, with a certificate embedding the Kraken brand and a matching favicon confirmed by kit analysis. Flagged by Google Safe Browsing as social engineering. Hidden behind Cloudflare. Likely targets exchange account credentials.

Brand in domain labelBrand in cert SANGoogle Safe Browsing

AI-generated from stored detector signals - the AI never visited the site. · 2026-09-08 · confidence 85%

Domain & Network

Whois

Registrar Moniker Online Services LLC

Network

IP 172.67.173.20

Country