# welcome-kraken-en-us.pages.dev — MALICIOUS

> Beware of welcome-kraken-en-us.pages.dev, a high-risk phishing domain mimicking Kraken. Avoid interaction; the site is currently offline.

## Summary
PhishDestroy identifies welcome-kraken-en-us.pages.dev as a brand impersonation threat targeting Kraken users. This domain aims to deceive individuals by mimicking Kraken's branding to harvest sensitive data.

The domain was registered on February 21, 2026, via Cloudflare, Inc. It resolves to IP 172.66.47.69 and has appeared on three security blocklists. Google Safe Browsing flags it for social engineering, and 14 out of 95 VirusTotal scanners detect malicious activity. The site is currently offline and shows a Cloudflare warning page.

Users are advised to avoid visiting this domain or entering any personal information. Always verify URLs directly through official Kraken channels, and report suspicious sites promptly to cybersecurity authorities to stay protected.

## Threat Details
- Verdict: MALICIOUS
- Site status: dead (HTTP 403)
- Target brand: Kraken
- Page title: Suspected phishing site | Cloudflare

## Domain Intelligence
- Registered: 2026-02-21 07:01:08
- Registrar: Cloudflare, Inc.
- Country: US
- IP: 172.66.47.69
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: ["jose.ns.cloudflare.com", "lily.ns.cloudflare.com"]
- SSL Issuer: Google Trust Services / WE1

## Detection Status
- VirusTotal: 14 vendors flagged
  Vendors: ["ADMINUSLabs", "ChainPatrol", "alphaMountain.ai", "BitDefender", "CyRadar", "ESET", "Fortinet", "G-Data", "Google Safebrowsing", "Kaspersky", "Lionic", "Sophos", "VIPRE", "Webroot"]
- Google Safe Browsing: FLAGGED
- Blocklists: 3 hits
  Lists: ["PhishDestroy", "MetaMask", "SEAL"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019ae4e4-0a58-740c-a790-66c4fa5c74b1.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/3d0d51a2-41c3-479a-b375-a5789790728e
- PhishDestroy: https://phishdestroy.io/domain/welcome-kraken-en-us.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/welcome-kraken-en-us.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/welcome-kraken-en-us.pages.dev/
Last updated: 2026-03-19