Security Scan Report: kra-coinken.top

Redirected to:
https://kra-coinken.top/Login/index
Site favicon
Submitted: Completed: publiccompleted
This website contacted 8 IPs in 4 countries across 7 domains to perform 22 HTTP transactions. The main domain is kra-coinken.top and was registered 8 months ago.

Submitted URL: https://kra-coinken.top/Contract/index.html?coin=eos

Effective URL:
https://kra-coinken.top/Login/index
Redirected

AI Security Verdict

High Risk

Confidence: 85%

8
Risk Score

Look-alike Kraken/XBT domain hosting an email+password login under a fake 'security verification' prompt — clear credential phishing; do not enter any credentials.

Risk Factors (4)
Deceptive, typosquat-style domain impersonating a well-known cryptocurrency exchange
Credential capture form (email + password) presented as a 'security verification' step
Coin-themed path/query redirection (?coin=eos -> /Login/index) consistent with phishing lure templating
Domain absent from Cisco Umbrella top 1M while borrowing a major financial brand
Domain age information unavailable

Details

Page Title

XBT

Scan Type

public

Domain Name Analysis

Domain 'kra-coinken.top' uses the .top top-level domain and has no subdomain. Its registrable label 'kra-coinken' stretches across 11 characters containing four vowels alongside six consonants, notching one hyphen. Word splitting yields 4 words: kr, a, coin, ken. Average segment length settles at 2.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

oS Gb aap { cxetten | Password

Page Load Overview

9.64s
Total Load Time
385 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:58 chars
Detector Agreement:100%

Website Classification

Primary Category

cryptocurrency blockchain78% confidence
Type: webapp
Method: ml+structural

All Detected Categories

cryptocurrency blockchain
78%
adult content
76%
technology software
60%
government public service
52%
news media journalism
50%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
827.221.16.176China
AS4837CHINA UNICOM China169 Backbone
2134.122.173.178Singapore
AS152194CTG Server Limited
247.246.2.175Moscow, Moscow, Russia
AS24429Zhejiang Taobao Network Co.,Ltd
2104.16.174.226United States
AS13335Cloudflare, Inc.
2104.16.175.226United States
AS13335Cloudflare, Inc.
2216.58.210.138United States
AS15169Google LLC
2107.149.142.218United States
AS398823PEG TECH INC
2142.251.38.67United States
AS15169Google LLC
228--

Detected Technologies4

JQueryv2.1.1
100%
Bootstrapv4.2.1
100%
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1C342B60A99E304497C1394B86FB75644BB69C097CA0ACD0D7FFC6378DF899C994A26CC

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:AB9HoaYbj2izeKl820UvdNs5f7Ff2vs0Si/n+uguDB8ZNBGNI21uIjj:AB9Sx+FIs0J/nrDB8GNF

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:12693:OIKlVCkygwQKSSMlzUAAQIAhwJCAYkEEdQcAhGCiQCjICyCQCaklTEAPEIBpShoMOYwEGgQRhCNkD6ECREwJxZJmC36hAYKB

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:1818001818000000
Perceptual Hash:cc8d333399666666
Difference Hash:33320c32320c1000
Wavelet Hash:a1383838f8f0f0f0
Color Hash:N/A

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data