web-crakan-helps[.]pages[.]dev

The domain web-crakan-helps.pages.dev is a confirmed phishing site engaged in brand impersonation targeting Kraken, a cryptocurrency exchange. It presents itself as a legitimate Kraken login page with the title 'Sign-In | Kraken Login' but is designed to harvest user credentials through credential phishing. No cryptocurrency drainer kit was identified. As of the latest verification, web-crakan-helps.pages.dev has been taken offline.

Technical indicators confirm the malicious nature of web-crakan-helps.pages.dev. The domain was registered through Cloudflare, Inc. on October 24, 2025, and resolves to the IP address 172.66.44.182, hosted on Cloudflare's infrastructure (AS13335) in the US. It is flagged by 12 of 95 security vendors on VirusTotal, including ADMINUSLabs, ChainPatrol, and alphaMountain.ai, and appears on one security blocklist (PhishDestroy). The SSL certificate is issued by Google Trust Services / WE1, and the site employs technologies such as HSTS, Cloudflare, and HTTP/3. Google Safe Browsing has not flagged the domain, but Gridinsoft assigns it a trust score of 0/100.

Users who interacted with web-crakan-helps.pages.dev should immediately change their Kraken account passwords and enable two-factor authentication (2FA) if not already active. Monitor the account for unauthorized transactions or suspicious activity. Report the phishing domain to Kraken's security team via their official abuse reporting channels and submit the URL to platforms like Google Safe Browsing, PhishTank, or the Anti-Phishing Working Group to aid in broader takedown efforts.