kraccount[.]krakenus[.]cz

This domain, kraccount.krakenus.cz, is identified as a brand impersonation threat specifically targeting the cryptocurrency exchange Kraken. The page title 'Kraccount | Kraccount' mimics legitimate account login interfaces, designed to deceive users into submitting credentials or sensitive financial information. No specific drainer kit was identified, but the site's structure suggests credential theft as the primary objective, leveraging trusted front-end libraries such as Bootstrap, jQuery UI, and Font Awesome to appear authentic.

Technical indicators confirm the malicious nature of this domain. VirusTotal reports a detection rate of 5 out of 95 security vendors, raising significant red flags. The domain is registered through REG-CZNIC and resolves to IP address 188.114.97.3, hosted behind Cloudflare with HTTP/3 support. It was created on March 24, 2018, and its SSL certificate is issued by Google Trust Services. The Gridinsoft trust score is 0 out of 100, and the domain appears on two security blocklists, including PhishDestroy and OISD. Google Safe Browsing (GSB) status was not explicitly provided, but the high vendor flagging suggests it may be flagged.

As of the latest analysis, kraccount.krakenus.cz is offline, indicating successful takedown actions by hosting providers or security researchers. The remaining risk is low for new users, but historical exposure remains a concern. Users who visited the site before takedown should change passwords, enable two-factor authentication on Kraken accounts, and monitor for unauthorized transactions. No further action is required for current users, but ongoing vigilance against similar domains is advised.