# eng-us-kraken.pages.dev — MALICIOUS

> Warning: eng-us-kraken.pages.dev is a high-risk phishing site impersonating Kraken. Avoid interaction; the domain is now offline for your safety.

## Summary
PhishDestroy identifies eng-us-kraken.pages.dev as a high-risk phishing domain impersonating the Kraken brand. Classified under brand impersonation threats, this site was created to deceive users by mimicking Kraken’s appearance and potentially harvesting credentials or sensitive information.

Technical analysis reveals the domain was registered on February 21, 2026, via Cloudflare, Inc., and resolved to IP address 172.66.47.121. It was flagged by 13 out of 95 security vendors on VirusTotal and appears on three security blocklists. Google Safe Browsing categorized the domain as SOCIAL_ENGINEERING, confirming its malicious intent. The page title identified was "Suspected phishing site | Cloudflare," indicating hosting provider intervention.

Currently, the domain is offline, having been taken down to prevent further harm. PhishDestroy recommends users avoid any engagement with this domain and remain vigilant for similar impersonation attempts targeting Kraken. Continuous monitoring of related domains is advised to mitigate evolving phishing risks.

## Threat Details
- Verdict: MALICIOUS
- Site status: dead (HTTP 403)
- Target brand: Kraken
- Page title: Suspected phishing site | Cloudflare

## Domain Intelligence
- Registered: 2026-02-21 07:01:08
- Registrar: Cloudflare, Inc.
- Country: US
- IP: 172.66.47.121
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: ["walk.ns.cloudflare.com", "alex.ns.cloudflare.com"]
- SSL Issuer: Google Trust Services / WE1

## Detection Status
- VirusTotal: 13 vendors flagged
  Vendors: ["ChainPatrol", "alphaMountain.ai", "BitDefender", "CyRadar", "ESET", "Fortinet", "G-Data", "Google Safebrowsing", "Kaspersky", "Lionic", "Sophos", "VIPRE", "Webroot"]
- Google Safe Browsing: FLAGGED
- Blocklists: 3 hits
  Lists: ["PhishDestroy", "MetaMask", "SEAL"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019aacc7-9e2e-73ba-bf13-13092ac1d33d.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/9a6a704a-a5f3-4db4-9c34-5d1096161366
- PhishDestroy: https://phishdestroy.io/domain/eng-us-kraken.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/eng-us-kraken.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/eng-us-kraken.pages.dev/
Last updated: 2026-03-19