kra31-at-kraken[.]com

This domain, kra31-at-kraken.com, is flagged as a brand impersonation threat specifically targeting Kraken, a major cryptocurrency exchange platform. Analysis indicates the domain was created to mimic legitimate Kraken services, likely to deceive users into disclosing sensitive credentials or transferring digital assets. No direct evidence of a drainer kit has been identified, but the infrastructure aligns with known phishing campaigns targeting financial and cryptocurrency sectors. Infrastructure analysis reveals the following technical indicators: the domain was registered on March 27, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar frequently associated with high-risk domains. It resolves to the IP address 185.226.92.168, located in Turkey under the hosting provider BIGCORE. Security vendors have flagged this domain in 17 out of 95 detections on VirusTotal, and it appears on one security blocklist. Google Safe Browsing does not currently list this domain, but the detection rate and blocklist presence confirm its malicious classification. As of the latest assessment, kra31-at-kraken.com has been taken offline, likely due to enforcement actions by security providers. The domain was blocked by PhishDestroy, indicating active mitigation efforts. Despite its current offline status, the elevated risk remains due to the domain's recent creation date and association with known fraudulent infrastructure. Users are advised to verify domain authenticity through official channels, monitor for unauthorized transactions, and report any suspicious activity to relevant security teams for further investigation.