kraken-stat-logn[.]pages[.]dev

The domain kraken-stat-logn.pages.dev is a confirmed phishing site engaged in brand impersonation targeting Kraken, a cryptocurrency exchange. This site was designed to deceive users into believing they were accessing legitimate Kraken services, likely to harvest login credentials or other sensitive information. No cryptocurrency drainer kit was detected, but the site posed an elevated risk due to its convincing impersonation of the Kraken brand. As of the latest verification, kraken-stat-logn.pages.dev has been taken offline.

Technical indicators confirm the malicious nature of kraken-stat-logn.pages.dev. The domain was flagged by 13 of 95 security vendors on VirusTotal, including ChainPatrol, alphaMountain.ai, and BitDefender. It appeared on one security blocklist, PhishDestroy, and was registered through Cloudflare, Inc. on October 24, 2025. The domain resolved to the IP address 188.114.97.3, hosted by Cloudflare in the US, and used an SSL certificate issued by Google Trust Services / WE1. The observed page title was 'Suspected phishing site | Cloudflare', and the HTTP status returned was 403. Gridinsoft assigned the domain a trust score of 0/100, further indicating its malicious intent.

Users who interacted with kraken-stat-logn.pages.dev should immediately change their Kraken account passwords and enable two-factor authentication if not already active. Monitor the account for unauthorized transactions or suspicious activity. Report the phishing domain to Kraken’s official support channels and consider submitting it to platforms like Google Safe Browsing, PhishTank, or the Anti-Phishing Working Group to aid in broader mitigation efforts.