krakenboard-cc[.]pages[.]dev

Analysis indicates that the domain krakenboard-cc.pages.dev was registered on 11 Oct 2025 through Cloudflare, Inc. The site is hosted behind Cloudflare’s network (AS13335, United States) and resolves to IP 172.66.46.225. TLS termination is provided by a Google Trust Services certificate (WE1) and the server advertises HSTS and HTTP/3 support, suggesting a modern web stack. The HTTP response currently returns 403, and the site is listed as offline. The page title observed in the limited crawl, “KraKeN Форум — официальное сообщество маркетплейса,” explicitly references the Kraken brand and positions the page as an official community forum for a marketplace, matching the intelligence that the domain impersonates Kraken for a crypto‑scam campaign. Google Safe Browsing has flagged the URL for social engineering, and PhishDestroy has added it to its blocklist.

VirusTotal reports that 11 of 95 scanning engines flag the domain as malicious, and the Gridinsoft trust score is 0 / 100, reinforcing the malicious assessment. The domain also appears on one additional security blocklist. Evidence confirms that the infrastructure is fully controlled by Cloudflare, with no separate hosting provider disclosed, and the nameservers are listed as “KNOWN_SERVICE,” a placeholder that further limits attribution. No additional page content has been captured, so the exact phishing or credential‑harvesting mechanisms remain unknown.

However, the combination of brand impersonation, crypto‑scam labeling, and multiple independent detections indicates a high‑risk profile. Defenders should block the domain at network perimeter and DNS layers, monitor outbound connections to the associated IP, and ensure that any user‑facing applications enforce strict verification of Kraken‑related communications. Incident response teams should treat any traffic from this host as suspicious and consider adding the IP and domain to internal threat‑intel feeds.