krakendocs[.]netlify[.]app

This domain is confirmed as an active brand impersonation site targeting the Kraken cryptocurrency exchange. Registered through Netlify on December 2, 2025, it currently resolves to IP 35.157.26.135, hosted in Germany on AS16509 (Amazon.com, Inc.). The page title is 'Introduction | Kraken', indicating a direct attempt to imitate official Kraken documentation. The site uses a technology stack including Docusaurus, React, and Webpack, consistent with a documentation-style phishing page. The SSL certificate is issued by DigiCert Inc. VirusTotal reports 1 detection out of 95 security vendors, and the domain appears on one security blocklist. The Gridinsoft trust score is 0/100, and the site is blocked by PhishDestroy. The scam type is classified as a crypto scam. Defenders should block this domain at the network level, add it to threat intelligence feeds, and monitor for similar variations registered through Netlify. Users should be warned not to enter any credentials or wallet information on this site. The exact phishing mechanism (e.g., credential harvesting or cryptocurrency wallet drainer) has not yet been confirmed through content analysis, but the brand impersonation is clear from the page title and known intelligence.