kra--ken-login[.]pages[.]dev

The domain kra--ken-login.pages.dev is a high-risk phishing site that impersonates the cryptocurrency brand Kraken. It poses a significant threat of brand impersonation, aiming to trick users into revealing sensitive information such as login credentials. The site is currently taken offline, but caution is advised as it has been flagged for phishing.

Kra--ken-login.pages.dev has been flagged by 15 of 95 VirusTotal vendors, including ADMINUSLabs, ChainPatrol, and alphaMountain.ai, and is flagged for phishing by Google Safe Browsing under the category 'SOCIAL_ENGINEERING'. The domain is registered through Cloudflare, Inc., with a creation date of 2025-09-18. It resolves to the IP address 172.66.45.46, which is located in the US under the AS13335 Cloudflare, Inc. network. The SSL certificate is issued by Google Trust Services / WE1. The domain appears on one security blocklist, specifically PhishDestroy, and has a low Gridinsoft trust score of 0/100 and a Scamadviser trust score of 1/100.

If a user has interacted with kra--ken-login.pages.dev, they should immediately change their Kraken account passwords and enable two-factor authentication (2FA) to secure their account. They should also monitor their accounts for any unauthorized activity and report any suspicious transactions to Kraken support. To report this phishing site, users can submit the domain to Google Safe Browsing and other security platforms, and inform Kraken's security team directly through their official channels.