kraken-login-us[.]pages[.]dev

This domain, kraken-login-us.pages.dev, is identified as a brand impersonation phishing resource targeting the Kraken cryptocurrency exchange platform. Analysis confirms the domain is currently offline, though it previously hosted a fraudulent login interface titled 'Nautilus Secure · Sign In,' designed to harvest user credentials. Infrastructure analysis reveals the domain was registered through Cloudflare, Inc. on September 18, 2025, and resolves to the IP address 172.66.44.207, hosted on Cloudflare’s network (AS13335). The SSL certificate is issued by Google Trust Services (WE1). Security vendor detections on VirusTotal report 12 of 95 engines flagging the domain as malicious. The domain appears on one security blocklist and was previously blocked by automated phishing detection systems. The domain has been taken offline, reducing immediate risk to users. However, organizations and individuals are advised to update security controls to block the domain and associated IP address. Network administrators should monitor for residual connections to 172.66.44.207 and review logs for prior access attempts. Users who may have interacted with the domain should reset credentials for Kraken and any reused passwords, and enable multi-factor authentication where available.