krkcontrol25[.]store

Analysis of the domain krkcontrol25.store confirms its classification as an active phishing site targeting users of the Kraken cryptocurrency exchange. The domain, registered under the title 'Kraken 2.0 — Painel,' directly impersonates Kraken, a known brand in the cryptocurrency sector. Infrastructure analysis reveals the domain resolves to the IP address 191.96.78.192, which has been associated with prior malicious activity in threat intelligence pulses. The domain is currently flagged by one security vendor, though broader detection may still be limited due to its recent deployment or evasion techniques. The SSL certificate issued by Let's Encrypt provides a baseline of encryption, which is commonly exploited by threat actors to lend credibility to fraudulent sites. While the certificate itself is legitimate, its presence does not mitigate the domain's malicious intent. The domain has been included in two threat intelligence pulses, indicating prior identification by security researchers, yet it remains operational as of July 12, 2026. Defenders should treat this domain as high-risk and prioritize blocking or monitoring access to it. Given the targeted nature of the impersonation, users may be lured into entering sensitive credentials or financial information under the false pretense of accessing Kraken services. Organizations should review logs for connections to 191.96.78.192 and the domain itself, particularly in environments where cryptocurrency transactions are common. Further investigation into the hosting infrastructure and associated domains may reveal additional related threats. The exact phishing kit or payload delivered by this domain has not yet been analyzed, but the page title suggests a focus on administrative or account management impersonation.