kraken-com[.]pages[.]dev

This domain, kraken-com.pages.dev, is flagged as a brand impersonation phishing site targeting Kraken, a well-known cryptocurrency exchange platform. Analysis indicates the domain was designed to deceive users into believing they are interacting with the legitimate Kraken service, likely to harvest credentials or facilitate unauthorized transactions. No specific drainer kit signatures were identified in initial scans, but the infrastructure aligns with common phishing campaigns impersonating financial and crypto services. Infrastructure analysis reveals the following technical indicators: the domain resolves to IP address 172.66.47.82, hosted on Cloudflare’s network (AS13335) in the United States. It was registered through Cloudflare, Inc. on September 18, 2025, and is currently assigned an SSL certificate issued by Google Trust Services (WE1). The domain appears on one security blocklist and is flagged by 15 out of 95 security vendors on VirusTotal. Google Safe Browsing (GSB) status was not explicitly confirmed in available data, but the domain’s page title, 'Suspected phishing site | Cloudflare,' suggests internal detection by the hosting provider. As of the latest assessment, kraken-com.pages.dev has been taken offline, reducing immediate exposure risk. However, residual threats remain, particularly if the domain is reactivated or repurposed. Users who may have interacted with this domain are advised to revoke any active sessions, reset credentials, and monitor accounts for unauthorized activity. Organizations should update blocklists to include this domain and its associated IP address to prevent future access attempts. The elevated risk level is maintained due to the domain’s recent creation, brand impersonation tactics, and prior detection by multiple security vendors.