krakengroup[.]fr

This domain, krakengroup.fr, is identified as a confirmed phishing site specializing in brand impersonation targeting the Kraken cryptocurrency exchange. The site presents a fraudulent login interface titled 'Kraken — Connexion', designed to harvest user credentials and sensitive financial information. Analysis indicates the domain is currently offline, though prior activity confirms its malicious intent and operational threat to users. Infrastructure analysis reveals the domain was registered through IONOS SE and resolves to the IP address 212.227.75.29. The domain was created on May 30, 2026, an anomalous date suggesting potential domain spoofing or registry manipulation. Security vendors on VirusTotal flagged krakengroup.fr as malicious, with 17 of 95 engines detecting the threat. The domain appears on three distinct security blocklists, and its trust score, as assessed by Gridinsoft, is 0 out of 100. The site employed Phusion Passenger and Apache HTTP Server technologies, with a Let's Encrypt SSL certificate providing a veneer of legitimacy. Additional blocking by MetaMask, PhishDestroy, and SEAL further corroborates its classification as a high-risk phishing domain. Current status indicates the domain has been taken offline, though residual risk remains due to potential re-activation or migration to alternative infrastructure. Organizations and users are advised to block the domain and associated IP address 212.227.75.29 at the network perimeter. Security teams should monitor for indicators of compromise, including unauthorized access attempts or anomalous transactions linked to Kraken accounts. Users who may have interacted with the domain should immediately reset credentials, enable multi-factor authentication, and review account activity for signs of unauthorized access. Proactive threat hunting for related domains registered through IONOS SE or resolving to the same IP range is recommended to mitigate similar threats.