krakenstor[.]com

This domain, krakenstor.com, is flagged as a brand impersonation phishing site targeting Kraken, a major cryptocurrency exchange. Analysis indicates the infrastructure was designed to mimic legitimate Kraken services, likely to harvest user credentials or facilitate fraudulent transactions. The page title, 'Сайт на технических работах' (translated as 'Site under maintenance'), suggests an attempt to deceive users into believing the site is temporarily unavailable while masking malicious intent. Infrastructure analysis reveals the domain was registered on March 28, 2026, through Navicosoft Pty Ltd, and resolves to the IP address 172.67.181.232. The site employs Cloudflare Browser Insights and HTTP/3, with an SSL certificate issued by Google Trust Services. Security vendors on VirusTotal flagged the domain with a 4/95 detection score, and it appears on one security blocklist. The Gridinsoft trust score of 0/100 further corroborates its malicious classification. Currently, krakenstor.com is offline, reducing immediate risk to users. However, the domain remains registered, and its infrastructure could be reactivated. Organizations are advised to monitor for similar impersonation attempts, block the domain at the network level, and educate users on recognizing phishing indicators. The use of Cloudflare services in this campaign highlights the need for continuous vigilance against threat actors leveraging legitimate infrastructure for malicious purposes.