k-marketplace-cc[.]pages[.]dev

The domain k-marketplace-cc.pages.dev is a confirmed phishing site engaged in brand impersonation targeting users of the cryptocurrency exchange kraken. This site posed an elevated risk by mimicking kraken’s branding to deceive visitors into disclosing login credentials or sensitive account information. As of the latest verification, k-marketplace-cc.pages.dev has been taken offline, though it was previously active in credential-theft operations without deploying a crypto drainer kit.

Technical indicators confirm the malicious nature of k-marketplace-cc.pages.dev. The domain was flagged by 2 of 95 security vendors on VirusTotal, including Phishing Database and Trustwave, while appearing on 3 security blocklists such as PhishDestroy, MetaMask, and SEAL. Registered through Cloudflare, Inc. on February 20, 2026, the domain resolved to the IP address 172.66.44.189, hosted by Cloudflare in the US (AS13335). The SSL certificate was issued by Let’s Encrypt (E8), and the site employed technologies like HSTS and HTTP/3. At the time of assessment, the page returned a 403 HTTP status with the title 'Suspected phishing site | Cloudflare', and Gridinsoft assigned it a trust score of 0/100.

Individuals who interacted with k-marketplace-cc.pages.dev should immediately change their kraken account passwords and enable two-factor authentication (2FA) if not already active. Monitor the account for unauthorized transactions or suspicious activity, and report any fraud to kraken’s support team. Victims may also submit the domain to additional threat-intelligence platforms such as Google Safe Browsing, PhishTank, or the Anti-Phishing Working Group (APWG) to aid in broader mitigation efforts.