k-raken[.]framer[.]ai

The domain k-raken.framer.ai is a fraudulent cryptocurrency phishing site that impersonates the Kraken brand. The page title, "Kraken Login™ | Getting Started & Secure Device Setup®", indicates it poses as a legitimate Kraken login portal to trick users into entering their credentials or sensitive financial information. This constitutes a credential harvesting threat targeting cryptocurrency exchange users.

Technical analysis confirms the malicious nature of this site. VirusTotal reports 12 out of 95 vendors flagged the domain, with specific detection by ADMINUSLabs, ChainPatrol, alphaMountain.ai, Certego, and CyRadar. Google Safe Browsing has flagged it for social engineering. The domain was registered on January 6, 2018, through registrar CSC Corporate Domains, Inc., and resolves to IP address 35.71.142.77, hosted in the United States under AS16509 (Amazon.com, Inc.). The site uses a Let's Encrypt SSL certificate (E8) and Amazon Web Services nameservers.

The domain is currently offline or down, reducing immediate risk. However, its history of impersonation and detection by multiple security vendors and blocklists (1 blocklist entry) indicates a high risk level if reactivated. Users should avoid any interaction with this site and ensure they only access legitimate Kraken services through official channels.