krakenlighter[.]com
“yzilabs”
krakenlighter.com — Conteúdo indisponível. Representação da marca: Kraken; Tipo de golpe: Brand Impersonation. Resumo das evidências: VirusTotal 2/92 (alphaMountain.ai, Fortinet); URLQuery 1 det.; Spamhaus DBL_PHISH; 2 external blocklist matches (MetaMask, SEAL); PhishDestroy score 66/100. Registrador: GMO Internet Group.
A análise detalhada do PhishDestroy AI permanece em inglês para preservar o registro forense original.
PhishDestroy identifies krakenlighter.com as an active brand impersonation domain targeting Kraken users. This malicious domain mimics the official Kraken cryptocurrency exchange branding to deceive victims into entering sensitive credentials or cryptocurrency wallet information. The site appears designed to harvest login details or initiate unauthorized transactions, aligning with tactics commonly associated with crypto drainer toolkits.
This domain resolves to IP 38.14.63.108 and was registered on February 28, 2026 through GMO Internet, Inc. using a Let's Encrypt SSL certificate. As of the latest scan, VirusTotal reports 2 out of 95 detection engines flagged the domain, indicating it remains largely undetected by mainstream security tools. No evidence of a known crypto drainer kit (e.g., Inferno, Angel Drainer) has been confirmed at this stage, though the behavioral pattern strongly suggests impersonation with theft intent.
At present, krakenlighter.com remains active and under investigation. There are no confirmed entries in public blocklists or Google Safe Browsing (GSB) at this time. The domain poses a moderate risk due to its recent creation, low detection rate, and direct targeting of a major crypto brand. Users are advised to avoid accessing the site, report it to their security teams or browser vendors, and verify all cryptocurrency-related domains against official Kraken domains (kraken.com). While risk is classified as 'under_investigation', immediate caution is warranted given the potential for credential theft or fund loss.
Inteligência de segurança de rede
Pipeline de resposta a ameaças
Status da lista de bloqueios pública
Captura armazenada
Inteligência de Domínios
Detalhes técnicosDNS, SANs do SSL, carimbos de data e hora
ICANN OVERSIGHT
Credenciamento e contexto RAA
Credenciamento e contexto RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Tecnologias · 3 identified
Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.
nginx.org 100% de confiançaHTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.
www.rfc-editor.org 100% de confiançaAnálise do VirusTotal
Análise de desempenho do site
Google PageSpeed Insights — mobile performance audit of krakenlighter.com · checked May 9, 2026
Evidências e relatórios externos
PD-20260509-BE56D8 Recipient: abuse@internet.gmo Você foi afetado por este site?
Se você inseriu credenciais de conta, informações pessoais ou de pagamento, ou baixou um arquivo deste domínio, tome medidas imediatas. Abaixo estão os recursos para ajudá-lo a relatar o incidente e se proteger.
Notifique as autoridades locais
Selecione seu país para obter contactos oficiais do cibercrime ou crie um rascunho de reclamação →.
Verificar qualquer domínio
Análise de ameaças usando lista de bloqueio armazenada, WHOIS, DNS e evidências de verificação pública
Digitalize agoraDenunciar phishing
Envie domínios suspeitos para nosso banco de dados de ameaças — proteja a comunidade
DenunciarFeed de ameaças em tempo real
Relatórios recentes de phishing e alterações de disponibilidade observadas
MonitorarMantenha-se informado, mantenha-se seguro
Monitore ameaças em tempo real ou conteste esta listagem caso acredite que se trate de um falso positivo