digital-kracen-cdnn[.]framer[.]ai

The domain digital-kracen-cdnn.framer.ai is a phishing site engaged in brand impersonation targeting Kraken, a cryptocurrency exchange. It presents itself as a legitimate Kraken login page to deceive users into entering credentials, posing an elevated risk of credential theft. No cryptocurrency drainer kit was detected. The site is currently taken offline.

Technical indicators confirm the malicious nature of digital-kracen-cdnn.framer.ai. As of analysis, 7 of 95 VirusTotal security vendors flagged the domain for phishing, and Google Safe Browsing marked it with a 'SOCIAL_ENGINEERING' warning. The domain appears on one security blocklist (PhishDestroy) and is registered through CSC Corporate Domains, Inc., with a creation date of January 6, 2018. It resolves to the IP address 35.71.142.77, hosted on Amazon.com, Inc. infrastructure (AS16509) in the US. The SSL certificate is issued by Let's Encrypt (E8), and the observed page title was 'Sign in : Kraken'. Technologies detected include Framer Sites, React, HSTS, and HTTP/3. The domain uses nameservers ns-114.awsdns-14.com, ns-1198.awsdns-21.org, ns-1902.awsdns-45.co.uk, and ns-635.awsdns.

Users who interacted with digital-kracen-cdnn.framer.ai should immediately change their Kraken account passwords and enable two-factor authentication (2FA) if not already active. Monitor account activity for unauthorized transactions or logins. Report the phishing domain to Kraken's security team via their official support channels and submit it to Google Safe Browsing, PhishTank, or other threat-reporting platforms. If credentials were entered, assume they are compromised and avoid reusing them across other services.