usa-kraknlogin[.]pages[.]dev

This domain, usa-kraknlogin.pages.dev, represents a high-risk brand impersonation threat specifically targeting users of the Kraken cryptocurrency exchange platform. The site was designed to deceive visitors into disclosing sensitive credentials, including login details and multi-factor authentication codes, by presenting a fraudulent interface mimicking legitimate Kraken authentication portals. Such impersonation attacks are commonly used to facilitate unauthorized account access and subsequent financial theft from compromised digital asset accounts. Analysis indicates the domain was registered on November 04, 2025, through Cloudflare, Inc., and resolves to the IPv6 address 2606:4700:310c::ac42:2cae, hosted on infrastructure belonging to AS13335. Security vendor detection rates reveal 18 out of 95 engines flagged the domain as malicious on VirusTotal, while Google Safe Browsing explicitly categorizes it as phishing. The domain appears on one security blocklist and was proactively blocked by at least one specialized anti-phishing system. The SSL certificate, issued by Google Trust Services (WE1), does not mitigate the inherent risk posed by the fraudulent content. Users who visited usa-kraknlogin.pages.dev should immediately revoke any active sessions on the legitimate Kraken platform and reset their credentials using a secure, verified connection. Multi-factor authentication tokens used on the phishing site must be invalidated and replaced. Affected individuals are advised to monitor their accounts for unauthorized transactions and report any suspicious activity to the targeted service provider. System-level scans for malware or credential-stealing software are recommended to ensure no residual compromise persists.