kra-knlogin[.]pages[.]dev

As of July 23, 2026, the domain kra-knlogin.pages.dev has been confirmed as a brand impersonation site targeting Kraken. The domain was registered through Cloudflare, Inc. on February 21, 2026, and resolves to the IP address 188.114.96.3, which is located in the United States and is part of the Cloudflare, Inc. network (AS13335). The SSL certificate for this domain is issued by Google Trust Services, indicating a potential use of Cloudflare's services to enhance credibility. The HTTP status code 403 suggests that the domain is currently inaccessible, possibly due to being taken offline or blocked by security measures.

The page title 'Suspected phishing site | Cloudflare' further confirms the malicious nature of this domain. Analysis indicates that the domain has been flagged by 13 out of 93 security vendors on VirusTotal, and it appears on one security blocklist. Google Safe Browsing has also flagged this domain for social engineering, which typically involves deception to manipulate users into performing actions that compromise security. The Gridinsoft trust score of 0/100 underscores the domain's lack of legitimacy.

Given the high risk level and the evidence of brand impersonation, defenders are advised to block this domain and educate users about the dangers of visiting unverified sites, especially those impersonating well-known brands like Kraken. The exact content of the site has not been analyzed, but the combination of the page title, registrar, and IP hosting details strongly suggests that it was designed to deceive users into believing it was an official Kraken site. Defenders should monitor for any related infrastructure and ensure that their security policies are up-to-date to prevent similar attacks.