krakenweb3[.]com

This domain is flagged as a high-risk brand impersonation threat specifically targeting Kraken, a cryptocurrency exchange platform. The infrastructure is designed to deceive users into believing they are interacting with legitimate Kraken services, potentially leading to credential theft, financial fraud, or unauthorized access to sensitive accounts.

Analysis indicates the domain krakenweb3.com was registered on June 30, 2026, through Spaceship, Inc. It currently resolves to the IP address 216.198.79.1 and employs a Let's Encrypt SSL certificate, which may lend a false sense of legitimacy. VirusTotal reports that 2 out of 95 security vendors have flagged this domain as malicious. The page title, Krakenweb3, further reinforces the attempt to mimic the Kraken brand. No evidence of widespread blocklisting or low trust scores from additional threat intelligence platforms was observed at the time of analysis, though the domain remains active and unmitigated.

To mitigate risks associated with this brand impersonation threat, organizations and users should immediately block the domain krakenweb3.com and its resolving IP address 216.198.79.1 at the network perimeter. Security teams are advised to monitor for any attempts to access this domain from internal networks and investigate potential exposure. Users should be educated on verifying domain authenticity, particularly for financial or cryptocurrency-related services, by cross-referencing URLs with official sources. Multi-factor authentication (MFA) should be enforced for all accounts associated with Kraken or similar platforms to reduce the impact of credential compromise. If interaction with this domain has already occurred, affected accounts should be reviewed for unauthorized activity, and credentials should be rotated immediately.