krakensi[.]it[.]com

The domain krakensi.it.com has been identified as a high-risk threat, primarily categorized as brand impersonation. It impersonates the well-known cryptocurrency exchange Kraken, potentially leading users to compromise their credentials or funds. The domain does not appear to be associated with any specific drainer kit or malware distribution mechanism, but the impersonation of a trusted brand significantly increases the risk of user deception.

Analysis indicates that the domain has a VirusTotal score of 1/95, suggesting that one security vendor has flagged it as malicious. The domain was registered through UK Intis Telecom Ltd and resolves to the IP address 172.67.186.202. It was created on October 23, 1992, which is an unusually early creation date for what appears to be a recent threat. The domain appears on three security blocklists and has a Gridinsoft trust score of 0/100, further highlighting its malicious nature.

The domain krakensi.it.com is currently offline, which suggests that it may have been taken down or abandoned. Despite this, the risk remains elevated due to the potential for the domain to be repurposed or reactivated. Users should avoid any links or communications associated with this domain and ensure their security software is up-to-date. Security teams should monitor for any signs of the domain re-emerging and take proactive measures to block or report any related activity.