krakn-loginn[.]pages[.]dev

The domain krakn-loginn.pages.dev was created on February 21, 2026 and is registered through Cloudflare, Inc. It resolves to the IP address 188.114.96.3, which belongs to AS13335 Cloudflare, Inc. and is geolocated in the United States. DNS resolution uses the Cloudflare nameservers craig.ns.cloudflare.com and dina.ns.cloudflare.com, and the site is protected by an SSL certificate issued by Google Trust Services under the WE1 label. An HTTP request to the site returns a 403 status code, indicating that access is denied, while the page title presented by the server reads "Suspected phishing site | Cloudflare". Cloudflare security features observed include HTTP Strict Transport Security (HSTS) and HTTP/3 support.

Independent analysis by Gridinsoft assigns a trust score of 0 out of 100, reflecting an extremely low confidence rating. VirusTotal scans report that ten of ninety‑three security vendors flagged the domain, and it appears on a single public security blocklist. PhishDestroy has also listed the domain as blocked. The site is classified as a crypto scam that impersonates the Kraken brand, matching the reported brand target of Kraken.

Current operational status is offline, which limits immediate threat exposure but does not remove the underlying infrastructure. Defenders should continue to monitor the associated IP address and Cloudflare nameservers for any re‑activation, enforce blocklists that include this domain, and consider adding the IP to network‑level deny lists. Further investigation is warranted to determine whether additional subdomains or related assets share the same hosting footprint, as the existing evidence suggests a targeted brand‑impersonation campaign.