en-kraken-onion-site-net[.]pages[.]dev

This domain en-kraken-onion-site-net.pages.dev is flagged as a high-risk brand impersonation targeting Kraken, a cryptocurrency exchange. The page title indicates it is promoting a darknet market site and Kraken mirror or entrance, suggesting a crypto scam operation. The domain was registered on September 2, 2020, through Cloudflare, Inc., and is hosted on Cloudflare infrastructure (AS13335) with an IP address of 188.114.97.3 located in the United States. It uses Cloudflare nameservers and technologies including Bootstrap, HSTS, Cloudflare, and HTTP/3, with an SSL certificate issued by Google Trust Services. Security analysis shows a Gridinsoft trust score of 0 out of 100, and it appears on one security blocklist. VirusTotal reports 13 out of 93 security vendors flagging this domain as malicious, and Google Safe Browsing flags it for social engineering. The domain is currently blocked by PhishDestroy. Defenders should block this domain at the network level and monitor for related infrastructure using the Cloudflare ASN and IP 188.114.97.3. The exact content of the page has not been visually analyzed, but the page title and security flags strongly indicate a phishing or scam site impersonating Kraken. Uncertainties include the specific scam mechanism and whether it is part of a larger campaign. Recommended actions include updating blocklists, alerting users, and investigating the registration details for additional domains. Active as of July 12, 2026.