krakedluuugiiinnnn1[.]godaddysites[.]com

The domain krakedluuugiiinnnn1.godaddysites.com has been identified as a high-risk brand impersonation threat targeting Kraken, a well-known cryptocurrency exchange. This domain was created with the intention of deceiving users through fake login pages, potentially leading to credential theft. The page title 'Kr𝖆ken Loℊin | Loℊ In' indicates a clear attempt to mimic the official Kraken login interface, likely to harvest user credentials for malicious purposes.

Technical indicators associated with this domain include a VirusTotal detection score of 16 out of 95 security vendors flagging it as malicious. The domain was registered via GoDaddy.com, LLC, and resolves to IP address 13.248.243.5. It was created on March 31, 2026, and employs technologies such as GoDaddy Website Builder, RequireJS, and HSTS. Google Safe Browsing has flagged it for 'SOCIAL_ENGINEERING,' and it appears on three separate security blocklists, indicating widespread recognition of its threat potential.

Currently, the domain has been taken offline, mitigating immediate risk. This action was supported by blocking efforts from MetaMask, PhishDestroy, and SEAL. However, the domain's prior operation suggests that users should remain vigilant for similar threats. It is recommended that users verify URLs before entering credentials and utilize security solutions that provide real-time threat detection to prevent exposure to such impersonation attempts.