krakenmainnnet[.]pages[.]dev

Analysis of krakenmainnnet.pages.dev indicates a brand‑impersonation campaign targeting Kraken users. The domain was registered on February 21, 2026 through Cloudflare, Inc. and resolves to the Cloudflare IP address 172.66.45.17, which is located in the United States under ASN 13335. No SSL certificate is presented, and the site currently returns an offline HTTP status, confirming the "Current status: taken offline" indicator.

The page title returned by the server is "MainNet Project," which does not reference Kraken directly, but the intelligence set classifies the site as a crypto‑scam that impersonates the Kraken brand. VirusTotal scans show five of ninety‑three security vendors flagging the domain, providing modest detection confidence. The domain appears on a single security blocklist and is explicitly blocked by PhishDestroy, reinforcing its malicious reputation.

Defenders should treat the domain as hostile: add the fully qualified domain name and its resolving IP address to network deny lists, enforce DNS‑level blocking, and monitor for any resurgence of the host after the offline status is lifted. Because the site lacks TLS, any future activation would be exposed to opportunistic interception, yet the primary risk remains credential harvesting or crypto‑fund diversion under the Kraken guise. Continuous threat‑intel feeds should be consulted for any new indicators of compromise associated with the 172.66.45.17 address or similar Cloudflare‑hosted domains that reference "MainNet" or cryptocurrency terminology.