borad-kraken-en[.]pages[.]dev

The domain borad-kraken-en.pages.dev is a confirmed phishing site engaged in brand impersonation targeting Kraken, a cryptocurrency exchange. It was designed to deceive users into believing they were interacting with the legitimate Kraken platform, posing a high risk of credential theft or financial fraud. As of the latest verification, borad-kraken-en.pages.dev has been taken offline, though it previously operated as a cryptocurrency scam.

Technical analysis reveals that borad-kraken-en.pages.dev was flagged by 14 of 95 security vendors on VirusTotal, including ADMINUSLabs, ChainPatrol, and alphaMountain.ai. Google Safe Browsing classified it as a social engineering threat under the label 'SOCIAL_ENGINEERING'. The domain was registered through Cloudflare, Inc. on October 31, 2025, and resolved to the IP address 188.114.96.3, hosted by Cloudflare in the US. It appeared on one security blocklist (PhishDestroy) and used an SSL certificate issued by Google Trust Services / WE1. The observed page title was 'Suspected phishing site | Cloudflare', and the HTTP status returned a 403 error. Technologies detected included HSTS, Cloudflare, and HTTP/3, with a Gridinsoft trust score of 0/100.

Users who interacted with borad-kraken-en.pages.dev should immediately change their Kraken account passwords and enable two-factor authentication. If cryptocurrency transactions were attempted, revoke any token approvals and consider transferring funds to a new wallet. Report the domain to Kraken’s security team and submit it to platforms like Google Safe Browsing, PhishTank, or the Anti-Phishing Working Group to aid in broader mitigation efforts.