kraken-6oc[.]pages[.]dev

The domain kraken-6oc.pages.dev was registered on July 26, 2024 through Cloudflare, Inc. It resolves to the IP address 188.114.97.3, which belongs to AS13335 Cloudflare, Inc. and is geolocated in the United States. The domain is served behind Cloudflare’s edge network, uses an SSL certificate issued by Google Trust Services (WE1), and responds with HTTP status 200. The authoritative nameservers are anahi.ns.cloudflare.com and camilo.ns.cloudflare.com.

The page title returned by the server is “KRAKEN88: 70+ Situs Slot Bonus 100% Depo 25 Bonus 25 To Kecil Bebas IP”, which explicitly references the well‑known cryptocurrency exchange brand Kraken. This indicates a brand‑impersonation campaign aimed at luring users interested in crypto services. The title also mentions slot‑gaming terminology, suggesting a hybrid scam that blends cryptocurrency promises with gambling incentives, although the full page content has not been publicly disclosed.

Threat intelligence feeds have flagged the domain as high‑risk. It appears on three blocklists, including PhishDestroy, MetaMask and SEAL. VirusTotal analysis shows that 3 of 95 security vendors have flagged the domain, and Gridinsoft assigns a trust score of 0 out of 100. Detected technologies include AMP, Lightbox, HSTS, HTTP/3, and the site enforces HSTS, further confirming the use of modern web stack. The combination of brand impersonation, cryptocurrency‑focused lure, and low trust scores justifies its current high‑risk classification.

Defenders should treat kraken-6oc.pages.dev as malicious. Immediate actions include adding the domain to DNS blocklists, configuring web‑filtering solutions to deny HTTP/HTTPS traffic, and monitoring for any outbound connections to the associated IP address. Incident response teams should also inspect any logs for attempts to access the domain, especially from accounts that handle cryptocurrency transactions, and enforce multi‑factor authentication to mitigate credential compromise.