crptlg[.]kraken[.]avilios[.]com

This domain, crptlg.kraken.avilios.com, was designed to impersonate the legitimate cryptocurrency exchange Kraken. Such sites typically attempt to steal login credentials, private keys, or other sensitive information by tricking visitors into believing they are on an official Kraken page. The page title was simply "Home page," suggesting a generic phishing landing page rather than a fully developed fake portal. Although the site is now offline, its previous existence poses a risk to anyone who may have interacted with it.

PhishDestroy identified this threat through multiple indicators. The domain was created on May 19, 2026, and registered through 101domain GRS Limited, a registrar sometimes associated with suspicious domains. It resolved to IP address 185.68.16.29 and used a Let's Encrypt SSL certificate (R12), which is common for both legitimate and malicious sites. While VirusTotal shows 0 out of 95 security vendors detecting it as malicious, the domain appears on three security blocklists, and its clear impersonation of Kraken warrants caution. The brand target was explicitly Kraken, and the unique seed e1eaa0 was used to track this investigation.

If you visited this domain or entered any information, take immediate action. Change your Kraken account password and enable two-factor authentication (2FA) if you haven't already. Monitor your accounts for unauthorized activity, and consider contacting Kraken support to report the incident. For any other sites where you may have reused the same credentials, change those passwords as well. While the domain is now offline, the threat actors may have collected data before takedown, so staying vigilant is essential.