page-kraken-en[.]square[.]site

The domain page-kraken-en.square.site is currently active and has been identified as a phishing site involved in brand impersonation, specifically targeting the cryptocurrency platform Kraken. This domain is not safe and is associated with scam activities intended to deceive users by mimicking Kraken's branding. The site is live, and its page title is 'Nur einen Moment…', which may be used to lure victims into entering sensitive information under false pretenses.

Technical analysis shows that page-kraken-en.square.site is flagged by 13 of 95 security vendors on VirusTotal, including ChainPatrol, alphaMountain.ai, and BitDefender. The domain was registered through MarkMonitor, Inc. on February 05, 2019, and resolves to IP address 74.115.51.4, located in the US under AS27647 Weebly, Inc. It uses a Let's Encrypt / E7 SSL certificate and is listed on one security blocklist, specifically PhishDestroy. The nameservers are hosted on AWS infrastructure, and the technologies detected include Amazon Web Services and Cloudflare. Google Safe Browsing does not currently flag this site. The HTTP status is 404, which may indicate recent changes or attempts to evade detection.

Anyone who interacted with page-kraken-en.square.site, especially those who entered cryptocurrency credentials, should immediately change their Kraken account password, enable two-factor authentication, and monitor their accounts for unauthorized activity. It is also recommended to report the phishing domain to Kraken's official support channels and relevant authorities. Staying vigilant against brand impersonation scams like this is critical to protecting personal and financial information.