Security Scan Report: kra-coinken.top

Redirected to:
https://kra-coinken.top/Login/index
Site favicon
Submitted: Completed: publiccompleted
This website contacted 7 IPs in 2 countries across 6 domains to perform 21 HTTP transactions. The main domain is kra-coinken.top and was registered 8 months ago.

Submitted URL: https://kra-coinken.top/Contract/index.html?coin=near

Effective URL:
https://kra-coinken.top/Login/index
Redirected

AI Security Verdict

Moderate Risk

Confidence: 62%

5
Risk Score

Unranked crypto-themed login portal on a recent .top domain with a Spamhaus-listed host. No confirmed brand impersonation, malware or exfiltration, but credentials should not be entered without verification.

Risk Factors (4)
Credential login form (email + password) on an unranked, recently registered .top domain
Hosting IP appears on the Spamhaus DROP list per IDS telemetry
Very low legitimacy profile (no reputation, no organization/contact/legal signals)
Crypto-coin themed login portal on a domain unrelated to any known exchange
Safety Factors (5)
Domain is 219 days old (>6 months), above the very-new threshold
No Indicators of Compromise matched against the page or its resources
No JavaScript malware patterns or known malicious kits detected
No cross-origin form submission and no credential exfiltration detected
No payment fields; page validated as self-branded 'Kcoin' rather than a confirmed impersonation
Domain age information unavailable

Details

Page Title

Kcoin

Scan Type

public

Domain Name Analysis

The domain 'kra-coinken.top' uses the .top top-level domain without a subdomain. The second-level label 'kra-coinken' is 11 characters long split between 4 vowels and six consonants, plus one hyphen. It segments into four words: kr, a, coin, ken. Median word length is 2.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Signin Register rrilbox OFS Forgot Password? Not registered yet?

Page Load Overview

2.75s
Total Load Time
396 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:97 chars
Detector Agreement:100%

Website Classification

Primary Category

cryptocurrency blockchain73% confidence
Type: webapp
Method: ml+structural

All Detected Categories

cryptocurrency blockchain
73%
technology software
48%
news media journalism
48%
finance banking
40%
government public service
37%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
3104.17.24.14United States
AS13335Cloudflare, Inc.
3107.149.142.218United States
AS398823PEG TECH INC
3134.122.189.6Singapore
AS152194CTG Server Limited
3151.101.129.229United States
AS54113Fastly, Inc.
3216.58.210.131United States
AS15169Google LLC
3151.101.193.229United States
AS54113Fastly, Inc.
3192.178.25.74United States
AS15169Google LLC
217--

Detected Technologies3

JQueryv2.1.1
100%
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1C642A60A99E304897813D4A86FB756447F6AC057DA0ACD0D7BFC6378EF89DC984626CC

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:ABnHUKZaYbj2izeKl820UvdNs5f7Ff2vs0Si/n+xKZm2uDB8ZN8qNI21uIjj:ABn0Kjx+FIs0J/nWDBtqNF

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:13169:AQNThrbgUgkAKECUnPDSVqRcRpAkaPAiJIiqAABInAKDcSKIkGgC4AIBkYcBbhQyPCosQgYrhCNDIg1twCWASBCEbAFhpbhI

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:1818001818000000
Perceptual Hash:cccc33b999266666
Difference Hash:33b22cb2320c1000
Wavelet Hash:9d1c181838200000
Color Hash:N/A

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data