secure-krakun-app[.]framer[.]website

This domain, secure-krakun-app.framer.website, is identified as a brand impersonation threat targeting Kraken, a cryptocurrency exchange platform. The site mimics the official Kraken login portal, presenting a high risk of credential harvesting and unauthorized account access. As of the latest analysis, the domain has been marked offline, though prior activity suggests malicious intent. Analysis indicates the domain was flagged by 9 of 95 security vendors on VirusTotal, reflecting broad detection of its fraudulent nature. Registered through CSC Corporate Domains, Inc. on November 19, 2021, it resolves to the IP address 52.223.52.2. The domain appears on one security blocklist and employs a Let's Encrypt SSL certificate, which, while providing encryption, does not validate legitimacy. Infrastructure analysis reveals the use of Framer Sites, React, HSTS, and HTTP/3 technologies, which are consistent with modern web development but do not mitigate the underlying threat. The domain is currently offline, reducing immediate risk, but its prior activity warrants caution. Organizations and users are advised to block the domain and associated IP address (52.223.52.2) at the network level. Security teams should monitor for similar impersonation attempts, particularly those using Framer-hosted domains or Let's Encrypt certificates in phishing campaigns. End-users should verify domain authenticity before entering credentials and report suspicious login pages to their security providers.