secure-krakn-logn-en-us[.]pages[.]dev

This domain, secure-krakn-logn-en-us.pages.dev, is identified as a high-risk brand impersonation threat specifically targeting Kraken, a cryptocurrency exchange platform. Analysis indicates the site was designed to deceive users into disclosing sensitive credentials or transferring digital assets under false pretenses. The domain is currently offline, though prior activity suggests it was operational for malicious purposes. Infrastructure analysis reveals the domain was registered on November 03, 2025, through Cloudflare, Inc., and resolved to the IP address 172.66.47.7, hosted on autonomous system AS13335. Security telemetry shows the domain was flagged by 14 of 95 vendors on VirusTotal, indicating broad detection across multiple threat intelligence sources. It also appears on one security blocklist and was explicitly blocked by PhishDestroy. The SSL certificate, issued by Google Trust Services under the identifier WE1, further confirms the domain's association with deceptive infrastructure. The page title, Suspected phishing site | Cloudflare, aligns with automated detection mechanisms that identified the domain as malicious. Current status indicates the domain has been taken offline, likely due to enforcement actions or automated takedown procedures. However, the risk remains elevated for users who may have interacted with the site prior to its deactivation. Organizations and individuals are advised to monitor for unauthorized access to cryptocurrency accounts, revoke any active sessions, and reset credentials if exposure is suspected. Network administrators should block the domain and associated IP address at the perimeter to prevent residual access attempts. Users are urged to verify the legitimacy of any communication or website claiming affiliation with Kraken by cross-referencing official channels and enabling multi-factor authentication for enhanced security.