idn-kraken[.]daftpage[.]com

This domain, idn-kraken.daftpage.com, is actively impersonating the Kraken cryptocurrency exchange platform, as indicated by its page title 'Account access request - Kraken | Buy, Sell and Margin Trade …' and confirmed brand target. Infrastructure analysis reveals the domain was registered on October 24, 2021, and resolves to IP 216.150.1.129, hosted through OVH, SAS. The site employs a Let's Encrypt SSL certificate and utilizes technologies including Node.js, React, Next.js, and Google Analytics, alongside Crisp Live Chat for potential social engineering interactions. As of July 12, 2026, the domain remains active and has been flagged by 11 of 95 security vendors on VirusTotal, with a Gridinsoft trust score of 0/100. It appears on at least one security blocklist, though the specific blocklist name is not disclosed in available intelligence. Defenders should treat this domain as high-risk due to its confirmed brand impersonation, active status, and detection by multiple security vendors. Recommended actions include blocking the domain and IP at network perimeter controls, monitoring for credential harvesting attempts linked to this infrastructure, and alerting users to the impersonation risk. The use of Vercel and HSTS suggests modern hosting and security measures, which may complicate takedown efforts. No evidence currently indicates the specific phishing kit or payload in use, so further analysis of the site's content is advised if feasible.