secure-kraken-cdn-auth[.]pages[.]dev

PhishDestroy assesses this domain as high risk due to its specific threat type: brand impersonation targeting Kraken, a cryptocurrency exchange. The site was designed to deceive users into believing they were accessing legitimate Kraken services, likely to steal login credentials or financial information. The domain is now offline, but its past activity poses ongoing risks to users who may have interacted with it.

Technical indicators paint a clear picture of malicious intent. The domain was created on October 25, 2025, and registered through Cloudflare, Inc. It resolved to IP address 188.114.96.3 and used an SSL certificate from Google Trust Services (WE1). VirusTotal flagged the domain with 16 out of 95 security vendors marking it as malicious, and it appears on 2 security blocklists. Google Safe Browsing specifically flags it for phishing. The page title, "Suspected phishing site | Cloudflare," indicates that Cloudflare itself detected and blocked the site. These data points collectively confirm the domain's fraudulent nature.

To protect against such brand impersonation attacks, users should always verify website URLs carefully, especially for financial services. Never click on links from unsolicited emails or messages; instead, type the official URL directly into the browser. Enable two-factor authentication on all Kraken accounts and monitor account activity for unauthorized access. If you entered credentials on this site, change your passwords immediately and contact Kraken support. PhishDestroy recommends using a password manager to avoid reusing passwords and staying informed about common phishing tactics to recognize red flags like misspelled domains or urgent requests for personal information.