krakenaaspdd[.]com

PhishDestroy identifies krakenaaspdd.com as a high-risk domain engaged in active brand impersonation targeting Kraken. The domain resolves to a drainer kit designed to harvest credentials and cryptocurrency assets from victims who interact with the fraudulent site. This operation mimics Kraken’s branding to deceive users into entering sensitive financial or login information, likely leading to direct theft of assets or account compromise. The domain was registered through Gname.com Pte. Ltd. on May 06, 2026, suggesting a recently deployed campaign.

Technical analysis reveals multiple red flags: the domain has a VirusTotal detection score of 10/95 security vendors, is flagged by Google Safe Browsing under the SOCIAL_ENGINEERING category, and is listed on 3 separate security blocklists. It resolves to IP address 192.238.181.185 and utilizes a Let’s Encrypt SSL certificate, which may falsely imply legitimacy. The domain is additionally blocked by MetaMask, SEAL, and InversionDNS, confirming cross-platform threat recognition. The rapid activation and infrastructure selection suggest an opportunistic threat actor leveraging newly registered domains for short-lived campaigns.

As of current monitoring, krakenaaspdd.com remains active and continues to pose a significant risk to users. Immediate defensive actions have been taken by multiple security platforms including MetaMask and InversionDNS, which block access to the domain. However, given the domain’s recent registration and active distribution, this threat remains fluid. Users are strongly advised to avoid interacting with this domain, verify all communications purporting to be from Kraken, and use hardware wallets or official application interfaces for cryptocurrency transactions to minimize exposure to drainer-based attacks.