access-learn-kraken-en[.]tem3[.]io

PhishDestroy identifies access-learn-kraken-en.tem3.io as an active crypto drainer impersonating Kraken, a major cryptocurrency exchange. The domain employs a fake learning portal theme to harvest wallet credentials and initiate unauthorized transfers. Based on seed e8c8bb, this domain is linked to a drainer kit designed to deceive users into connecting compromised wallets under the guise of educational content about Kraken’s services.

This domain was flagged by 15 out of 95 VirusTotal security vendors and is currently blocked by MetaMask and flagged by Google Safe Browsing under the SOCIAL_ENGINEERING category. It was registered on August 2, 2024, through GoDaddy.com, LLC, and resolves to the IP address 188.114.96.3. The SSL certificate is issued by Google Trust Services, which may be leveraged to appear legitimate at first glance. Its recent creation and rapid inclusion on security blocklists indicate opportunistic deployment targeting users searching for Kraken-related learning resources.

As of this report, access-learn-kraken-en.tem3.io remains active and presents a high risk to cryptocurrency users. PhishDestroy continues to monitor this domain and has coordinated with MetaMask and Google Safe Browsing to maintain block coverage. Users are strongly advised to avoid interacting with this domain and to verify the authenticity of any Kraken-related links using official channels. While current defenses are in place, the evolving nature of drainer kits means vigilance and caution are essential to avoid falling victim to credential theft or asset loss.