web-apps-krakeen-public-login[.]typedream[.]app

The domain web-apps-krakeen-public-login.typedream.app is currently active and poses an elevated risk of brand impersonation, specifically targeting the cryptocurrency exchange Kraken. The domain attempts to deceive users by mimicking the appearance and functionality of the legitimate Kraken login page, potentially leading to the theft of login credentials and other sensitive information.

Analysis indicates that the domain is flagged by 15 out of 95 VirusTotal vendors, suggesting a significant level of suspicion and potential malicious activity. The domain is registered through Cloudflare, Inc. and resolves to the IP address 188.114.97.3, which is located in the United States and associated with AS13335 Cloudflare, Inc. The SSL certificate is issued by Google Trust Services / WE1, which may lend a false sense of security to unsuspecting users. The domain appears on one security blocklist and is known to be blocked by PhishDestroy. The exact creation date is not provided, but the infrastructure analysis reveals the use of a reputable DNS provider and a Cloudflare IP, both of which can be leveraged to mask the true origin and intent of the domain.

Given the current active status and the elevated risk level, it is recommended that users avoid this domain and report any attempts to access it. Security teams should monitor and block traffic to this domain to prevent credential theft and other forms of data exfiltration. Additionally, organizations should educate their users about the risks of brand impersonation and the importance of verifying the authenticity of login pages, particularly for financial and sensitive accounts.