site-kraken-darknet-net[.]pages[.]dev

The domain site-kraken-darknet-net.pages.dev was registered on February 21, 2026 through Cloudflare, Inc. and resolves to the IP address 188.114.96.3, which is announced by AS13335 and located in the United States. The hosting provider is Cloudflare, and the authoritative nameservers are may.ns.cloudflare.com and ryan.ns.cloudflare.com. TLS negotiation presents a certificate issued by Google Trust Services under the WE1 identifier, indicating a valid SSL chain but offering no protection against the underlying malicious content. HTTP requests to the site return a 403 status code, suggesting that the content is currently inaccessible; the domain is reported as taken offline as of the July 24 2026 observation date.

Threat intelligence flags the site as a crypto‑related scam that impersonates the Kraken brand. The page title retrieved from the site – "Kraken маркет сайт вход | ссылка на сайт площадка Kraken" – explicitly references Kraken and contains Russian language terms that align with a credential‑harvesting tactic. Google Safe Browsing has marked the URL for social engineering, and the domain appears on a single security blocklist. Independent analysis by PhishDestroy confirms the block, and Gridinsoft assigns a trust score of 0 out of 100, indicating a high confidence of malicious intent.

VirusTotal reports that 11 of 93 scanned security vendors flag the domain as malicious, reinforcing the suspicion raised by other sources. The combination of brand impersonation, a crypto‑scam classification, a low trust score, and multiple detections across reputable scanners demonstrates a clear risk to users seeking Kraken services. Defensive teams should add the IP address 188.114.96.3 and the domain itself to network deny lists, enforce DNS filtering that blocks the host, and monitor for any resurgence of activity. Continuous re‑scanning is advised because the domain status may change if the operators reactivate the site.