clash-vergex[.]com[.]cn

This domain, clash-vergex.com.cn, is actively engaged in brand impersonation targeting Kraken, a major cryptocurrency exchange platform. Analysis of the page title, 'Kraken 中文官网 — Kraken交易所电脑版下载,' confirms the intent to deceive users into believing they are accessing the legitimate Kraken Chinese-language website. The domain does not currently exhibit direct indicators of a crypto drainer kit but is designed to harvest credentials or sensitive user information under the guise of official Kraken services. Infrastructure analysis reveals the following technical indicators: the domain resolves to the IP address 47.86.107.202, hosted under AS45102 (Alibaba (US) Technology Co., Ltd.) in Hong Kong. It is registered through Dominet (HK) Limited, with a creation date of May 06, 2026, suggesting either a typographical error in the registration year or an attempt to obfuscate its true age. The domain is secured with a Let's Encrypt SSL certificate (identifier: YR1), a common tactic to lend superficial legitimacy. Detection metrics indicate a VirusTotal score of 2/95, with only two security vendors flagging the domain as malicious. However, it appears on three distinct security blocklists, including those maintained by high-confidence threat intelligence sources. As of the latest assessment, clash-vergex.com.cn remains active and unresolved by the registrar or hosting provider. The domain continues to resolve to its original IP, and no takedown actions have been observed. The risk level remains high due to the combination of brand impersonation, low detection rates, and the potential for credential theft or financial fraud. Users are advised to verify domain authenticity through official channels, avoid interacting with unsolicited links, and report the domain to relevant security teams for further mitigation. Organizations should update their blocklists to include this domain and its associated IP to prevent potential compromise.