krakencleanpro-com.pages.dev: Kraken brand impersonation threat

This domain, krakencleanpro-com.pages.dev, operates as a brand impersonation threat targeting Kraken, a cryptocurrency exchange platform. Analysis indicates the site presents itself as "Kraken Clean Pro - система защиты телефона или ноутбука," falsely claiming to offer security protection for devices. The intent is likely to deceive users into downloading malicious software or divulging sensitive credentials under the guise of a trusted brand, potentially leading to unauthorized access to cryptocurrency wallets or personal data theft.

Infrastructure analysis reveals the domain was registered on December 09, 2025, through Cloudflare, Inc., and resolves to the IP address 172.66.44.90, hosted in the United States under AS13335. The SSL certificate is issued by Google Trust Services (WE1). Security telemetry shows the domain is flagged by 11 out of 95 vendors on VirusTotal, appears on one security blocklist, and is explicitly labeled as phishing by Google Safe Browsing. The page title and domain structure further suggest an attempt to mimic legitimate Kraken services, leveraging the brand's reputation to enhance credibility.

Users who visited krakencleanpro-com.pages.dev should immediately disconnect the device from any network and perform a full system scan using updated security tools. If credentials or financial information were entered, affected accounts should be secured by changing passwords and enabling multi-factor authentication. Monitor all linked cryptocurrency wallets and financial accounts for unauthorized transactions. Report the incident to relevant security teams or fraud reporting platforms to aid in mitigation efforts. Avoid interacting with any prompts or downloads from the domain, as they may contain malware designed to exfiltrate data or deploy crypto drainers.