apps-kraken-us-en[.]pages[.]dev

This domain, apps-kraken-us-en.pages.dev, is flagged as a brand impersonation threat targeting Kraken, a major cryptocurrency exchange platform. Analysis indicates the infrastructure was designed to harvest user credentials and sensitive financial data through deceptive login interfaces mimicking legitimate Kraken authentication portals. No specific drainer kit signatures have been identified at this time, though the domain exhibits characteristics consistent with credential phishing campaigns in the cryptocurrency sector. Infrastructure analysis reveals the domain was registered through Cloudflare, Inc. on October 30, 2025, and resolves to the IP address 172.66.44.169, hosted within Cloudflare's network (AS13335). Security vendors on VirusTotal flagged the domain with 13 detections out of 95 scans, while it appears on one security blocklist. The SSL certificate is issued by Google Trust Services (WE1), and the page title was observed as 'Suspected phishing site | Cloudflare,' indicating preliminary detection by the hosting provider. The domain is currently offline, having been taken down following detection. Response actions included removal from active DNS resolution and blocking by security filters. Despite its offline status, residual risk remains for users who may have interacted with the domain prior to takedown. Organizations are advised to monitor for unauthorized access attempts linked to this infrastructure and implement additional authentication measures for accounts potentially exposed during the active phishing window.