Is don.co.ke safe or a scam?
don.co.ke shows an 'Account Suspended' page on a 1.6-year-old domain with mixed antivirus signals and a 35/100 trust score from one independent scanner.
At a glance
Antivirus · registration · identity- 2 engines classified the URL as malicious and 1 as suspicious; 58 returned harmless, 31 returned undetected, and 0 returned no usable result.
- gridinsoft.com: don.co.ke has a blacklist warning and a 35/100 trust score. Verify the site identity before use and avoid sending sensitive or payment data.
- The domain was registered Dec 19, 2024 and was 1.6 years old at scan time.
- Operator identity: Claimed Only. Contact details are present but not independently verified
- Google Safe Browsing returned no listed threat categories for this address at scan time.
Intelligence
The site presents itself as a suspended hosting account page rather than an active service. The visitor journey ends at a static suspension notice that includes language about account verification and suspension warnings, while the domain itself is only 1.6 years old and carries mixed security signals from antivirus engines and an independent scanner.
Evidence Map
One or more reputation sources recorded a concern
Contact details are present but not independently verified
Only partial behavior evidence was available
The domain was registered Dec 19, 2024 and was 1.6 years old at scan time.
- 1Two antivirus engines flagged the URL as malicious; one flagged it as suspicious
- 2Independent scanner reports blacklist warning and 35/100 trust score
- 3Page contains phishing language (account verification, suspension warnings)
- 4No phone number or postal address listed on the page
- 1Valid TLSv1.3 certificate presented at scan time
- 2Hosting IP abuse-confidence score 0/100 from three reports
- 3Contact email uses the site's own domain (webmaster@don.co.ke)
Observed page content
The captured page shows the title 'Account Suspended' and the message 'This Account has been suspended. Contact your hosting provider for more information.' No login form, countdown timer, or deceptive notification bait was recorded.
Domain and registration details
The domain don.co.ke was registered on 19 December 2024 and is 1.6 years old at scan time. Registration privacy protection was not observed in the saved record. The registrar is listed as Kenya Network Information Centre in one cited source.
Security signals
Two antivirus engines classified the URL as malicious and one as suspicious. Google Safe Browsing returned no listed threat categories. The hosting IP carries an abuse-confidence score of 0/100 from three reports. The site presented a valid TLSv1.3 certificate.
Independent source rating
Gridinsoft reports a blacklist warning and a 35/100 trust score, stating the site is classified as suspicious based on multiple risk signals including three blacklist detections. The same source notes the hosting provider as Cloudflare, Inc., San Francisco, California, US.
Visitor journey and contact fields
The redirect path contained two hops with no cross-domain, homoglyph, or internationalized-domain indicators. The page lists one contact email on its own domain (webmaster@don.co.ke) and no phone number or postal address. Traffic presence was not indexed in the saved result.
Website Preview

Screenshot capture was incomplete; HTML content corroborates a functional site.
- 1Displays a generic 'Account Suspended' notification typical of hosting provider error pages
- 2Screenshot incomplete (slow render) — page HTML loaded normally, ignoring parked-domain heuristic.
Web Research
Gridinsoft lists don.co.ke with a blacklist warning and 35/100 trust score, classifying it as a suspicious website based on multiple risk signals including three blacklist detections. The source recommends verifying site identity before use and avoiding sending sensitive or payment data. Registrar is listed as Kenya Network Information Centre and hosting provider as Cloudflare, Inc., San Francisco, California, US.
don.co.ke has a blacklist warning and a 35/100 trust score. Verify the site identity before use and avoid sending sensitive or payment data.
Registrar listed as Kenya Network Information Centre
Hosting provider: Cloudflare, Inc., San Francisco, California, US
Suspicious Website This site is classified as Suspicious Website based on multiple risk signals, including 3 blacklist detections.
Registrar: Kenya Network Information Centre
Hosting Provider AS13335 Cloudflare, Inc. San Francisco, California, US
Threat Detection
Antivirus results, browser warnings, isolated page observations, and the threat pattern identified in this report.
Antivirus engine results
Evidence behind this threat profile
- 1Two antivirus engines flagged the URL as malicious; one flagged it as suspicious
- 2Independent scanner reports blacklist warning and 35/100 trust score
- 3Page contains phishing language (account verification, suspension warnings)
- 4No phone number or postal address listed on the page
2 of 22 categories showed signals
This profile separates the site's primary threat from other patterns supported by the saved page evidence, public research, and security findings.
- Title and body text explicitly state 'Account Suspended' with instruction to contact hosting provider
- Visual analysis confirms generic hosting error page rather than functional site content
- No contact details, login forms, or commercial elements present
- Two AV engines flagged the domain (alphaMountain.ai: phishing; ChainPatrol: malicious)
- Gridinsoft report cites blacklist warning and 35/100 trust score
- Page text contains generic suspension language that could be repurposed for phishing lures
Related scanned sites
Technical Details
Identity, domain, infrastructure, and connection facts saved with this scan.
July 21, 2026 at 12:31 PM UTCIdentity
6 facts- Operator
- Claimed Only
- On-domain email
- 1 address
- Other email
- Not observed
- Phone
- Not observed
- Postal address
- Not observed
- Social profiles
- Not observed
Domain
8 facts- Domain age
- 1.6 years old
- Registered
- Dec 19, 2024
- Registrar
- Unavailable
- Expires
- Dec 19, 2026
- WHOIS updated
- Feb 14, 2026
- Registrant
- Unavailable
- Registration country
- Unavailable
- WHOIS privacy
- Not observed
Infrastructure
14 facts- HTTPS
- Valid certificate
- TLS protocol
- TLSv1.3
- Certificate issuer
- Google Trust Services · WE1
- Certificate subject
- don.co.ke
- Certificate valid from
- Jun 12, 2026
- Certificate valid to
- Sep 10, 2026
- Network address
- 104.21.49.21
- ASN
- Unavailable
- Hosting organization
- Cloudflare, Inc.
- Country
- US
- Server
- cloudflare
- Site platform
- Unavailable
- IP reputation
- 0% confidence · 3 reports
- Tor exit node
- No
Connections
13 facts- Scan scope
- Domain
- Destination host
- don.co.ke
- Redirects
- 2
- Cross-domain redirect
- No
- Redirect status codes
- 301 → 302 → 200
- Lookalike characters
- Not observed
- Internationalized domain
- No
- Page response
- 200
- Observation coverage
- Unavailable
- Extracted links
- Unavailable
- Unique IPs contacted
- Unavailable
- Countries contacted
- Unavailable
- Referenced domains
- 2
What to do
Use normal caution. Verify the site identity before use and avoid sending sensitive or payment data.
If you entered a password, change it on the official service by typing its known address yourself, enable two-factor authentication, and review recent account activity. Contact your bank if you also entered payment details.
Final Verdict
Why this verdict
The verdict is suspicious because the domain is 1.6 years old, two antivirus engines flagged the URL as malicious, one independent source lists a blacklist warning and 35/100 trust score, and the page displays a generic 'Account Suspended' notice with phishing-language concerns.
Use normal caution. Verify the site identity before use and avoid sending sensitive or payment data.
Key evidence
- 1Two antivirus engines flagged the URL as malicious; one flagged it as suspicious
- 2Independent scanner reports blacklist warning and 35/100 trust score
- 3Page contains phishing language (account verification, suspension warnings)
Safety FAQ
Is don.co.ke safe to use?+
The verdict is suspicious because the domain is 1.6 years old, two antivirus engines flagged the URL as malicious, one independent source lists a blacklist warning and 35/100 trust score, and the page displays a generic 'Account Suspended' notice with phishing-language concerns.
What should I do about don.co.ke?+
Use normal caution. Verify the site identity before use and avoid sending sensitive or payment data.
How old is don.co.ke?+
don.co.ke is 1.6 years old and was registered dec 19, 2024.
What if I already interacted with don.co.ke?+
If you entered a password, change it on the official service by typing its known address yourself, enable two-factor authentication, and review recent account activity. Contact your bank if you also entered payment details.
When was this report updated?+
This report reflects the scan completed July 21, 2026 at 12:31 PM UTC.
User reviews & comments(0)
Share your experience — "Lost $200 on a fake checkout" is more useful than "Scam". Your review helps others avoid traps.