kraken-sitedark-net[.]pages[.]dev

This domain presents a high risk to users, as it is actively impersonating the Kraken brand in a sophisticated phishing campaign. The threat is specifically a fake login page designed to harvest credentials and potentially deploy a crypto drainer, targeting users of the Kraken cryptocurrency exchange. The site's title, 'Kraken маркет сайт вход | ссылка на сайт площадка Kraken,' indicates it is masquerading as a legitimate Kraken marketplace entry point.

Technical indicators confirm the malicious nature of kraken-sitedark-net.pages.dev. VirusTotal reports that 10 out of 95 security vendors flag this domain as malicious. It is registered through Cloudflare, Inc. and resolves to IP address 172.66.45.18. The domain was created on November 21, 2023, and remains active. It appears on one security blocklist, and Google Safe Browsing flags it for phishing. The SSL certificate is issued by Google Trust Services, which may lend a false sense of legitimacy.

To stay safe, users should never enter credentials or sensitive information on this site. If you have already done so, immediately change your Kraken password and enable two-factor authentication. Report the domain to Kraken's security team and to PhishDestroy for further investigation. Always verify the official Kraken URL before logging in, and use a password manager to detect lookalike domains. PhishDestroy recommends adding this domain to your blocklist and educating users about brand impersonation threats.