en-tech-krakn[.]daftpage[.]com

The domain en-tech-krakn.daftpage.com was observed on July 12, 2026 as a high‑risk brand‑impersonation campaign targeting Kraken. The site presents the page title “Kraken: Buy and sell crypto securely”, indicating an attempt to masquerade as the legitimate cryptocurrency exchange. The campaign is classified as a cryptocurrency‑related impersonation and remains active at the time of reporting. Infrastructure analysis shows the domain was registered on October 24, 2021 through OVH, SAS. Authoritative name servers resolve to ns1.vercel-dns.com and ns2.vercel-dns.com, consistent with a Vercel hosting environment. DNS resolution points to IP address 216.150.1.65, which belongs to Amazon.com, Inc. (AS16509) and is geolocated in the United States. The site serves an HTTPS certificate issued by Let’s Encrypt (R13) and reports HTTP status code 308, indicating a permanent redirect. Threat intelligence aggregators have flagged the domain. VirusTotal records indicate that 7 of 95 scanned security vendors have raised detections, and the domain appears on one public blocklist. Google Safe Browsing classifies the URL under the “SOCIAL_ENGINEERING” category. The Gridinsoft trust score is 0 out of 100, reinforcing the malicious nature. PhishDestroy has already blocked the domain, confirming active mitigation by at least one anti‑phishing service. Defenders should immediately block en‑tech‑krakn.daftpage.com at network perimeter and endpoint filters, and monitor for any outbound connections to the associated IP 216.150.1.65. Because the page content has not been directly examined, analysts should treat any credential‑capture or transaction requests originating from this host as suspicious. Continued observation of the Vercel‑hosted infrastructure and periodic re‑scanning with updated vendor engines are recommended to detect any changes in the malicious payload or additional hosting assets.