apps-krakecom[.]created[.]app

This domain, apps-krakecom.created.app, poses a high-risk brand impersonation threat specifically targeting Kraken cryptocurrency exchange users. The site replicates the official Kraken login portal, displaying the page title 'Log In | Kraken.com' to deceive visitors into entering their account credentials. Such impersonation attacks are commonly used to harvest sensitive information, including usernames, passwords, and two-factor authentication codes, which can lead to unauthorized account access and financial theft. Analysis of the domain reveals multiple technical indicators confirming its malicious nature. The domain was registered on July 12, 2023, through Tucows Domains Inc. and resolves to the IP address 216.150.16.65, hosted on Amazon.com, Inc. infrastructure (AS16509). VirusTotal reports that 11 out of 95 security vendors flag this domain as malicious, while Google Safe Browsing explicitly classifies it as phishing. Additionally, the domain appears on one security blocklist and is currently offline. The SSL certificate, issued by Let's Encrypt (R13), does not mitigate the risk, as attackers frequently use valid certificates to lend false legitimacy to phishing sites. Users who visited apps-krakecom.created.app should take immediate action to mitigate potential risks. If credentials were entered, reset passwords for Kraken and any other accounts where the same credentials may have been reused. Enable multi-factor authentication (MFA) on all financial and cryptocurrency accounts to add an additional layer of security. Monitor account activity for unauthorized transactions and report any suspicious behavior to the platform's support team. Additionally, consider running a full antivirus scan on any device used to access the domain to detect potential malware or keyloggers that may have been deployed.