admin[.]krakenaaspdd[.]com

The domain admin.krakenaaspdd.com is currently active and has been identified as a high‑risk brand‑impersonation site targeting users of the cryptocurrency exchange Kraken. The site presents a login‑style interface with the page title “Admin | 登录”, a clear indication that it is intended to lure victims into entering credentials. The domain was registered on 6 May 2026 through Gname.com Pte. Ltd. and resolves to the IP address 192.238.181.185, which is assigned to SpeedVM Network Group LLC in Hong Kong. DNS resolution is provided by the authoritative name servers a3.share-dns.com and b3.share-dns.net. The site serves an HTTPS certificate from Let’s Encrypt (R13) and returns an HTTP 302 redirect, a pattern often used to forward visitors to the credential‑collection page. Multiple security platforms have flagged the domain. VirusTotal reports that 4 of 95 scanners label the site as malicious. Gridinsoft assigns the domain a trust score of 0 out of 100. Google Safe Browsing lists the URL under the “SOCIAL_ENGINEERING” category, and the domain appears on at least one public blocklist. PhishDestroy has also added the domain to its blocklist, confirming its active use in phishing campaigns. Given the concrete evidence of brand impersonation, low trust scores, and confirmed presence on blocklists, network defenders should block DNS resolution and HTTP/S traffic to admin.krakenaaspdd.com at perimeter devices. Email filters should flag any messages containing this domain or its sub‑domains, and endpoint protection solutions should treat connections to the associated IP as malicious. Continuous monitoring of the listed name servers and the IP range is advised, as the operators may shift infrastructure to new hosts while retaining the same registration details.