sso-kraken-eng[.]pages[.]dev

The domain sso-kraken-eng.pages.dev was identified as a suspected phishing site targeting the cryptocurrency brand Kraken. The site posed as a fraudulent login portal designed to steal user credentials and cryptocurrency assets. The page title, "Suspected phishing site | Cloudflare", indicated that the hosting provider had already flagged and blocked the content. The primary threat is credential theft and unauthorized access to Kraken user accounts, leading to potential financial loss.

Technical evidence confirms the malicious nature of this domain. VirusTotal reported 9 detections out of 95 security vendors, with flags from ADMINUSLabs, ChainPatrol, alphaMountain.ai, BitDefender, and CyRadar. The domain was registered on 2025-10-10 through Cloudflare, Inc. It resolved to IP address 188.114.96.3 located in the United States, hosted on AS13335 Cloudflare, Inc. SSL certification was issued by Google Trust Services / WE1. Nameservers were tessa.ns.cloudflare.com and trace.ns.cloudflare.com. The domain was present on 1 blocklist, and GridinSoft assigned a trust score of 0 out of 100.

As of the latest analysis, the domain is offline and inaccessible. The risk level is high due to the specific targeting of a cryptocurrency exchange and the confirmed phishing indicators. Users who may have visited the site before it was taken down should change their Kraken account credentials immediately and enable multi-factor authentication.