kraken-perehodnik[.]at

kraken-perehodnik.at is an active domain involved in brand impersonation attacks targeting the Kraken cryptocurrency exchange. This domain is used to deceive users by mimicking Kraken’s branding, likely to harvest credentials or conduct fraudulent transactions. No specific drainer kit has been identified in association with this domain, but its impersonation tactics pose an elevated risk to users.

Technical analysis shows that kraken-perehodnik.at has been flagged by 15 out of 95 security vendors on VirusTotal, indicating notable malicious activity. The domain was registered through Dynadot INC, a registrar accessible at https://nic.at/registrar/650. It resolves to the IP address 138.124.53.206 and utilizes a Let's Encrypt SSL certificate, which may lend it a false sense of legitimacy. The domain is currently active, but there is no data on its creation date or Google Safe Browsing (GSB) status provided. Blocklist counts have not been specified.

Currently, kraken-perehodnik.at remains active and continues to represent an elevated threat due to its brand impersonation strategy. Security teams are advised to monitor and block communications from this domain, while end users should exercise caution when interacting with links or emails referencing Kraken. Continued vigilance and timely threat intelligence updates are essential to mitigating risks posed by this and similar domains.