491862-kraken[.]com

The domain 491862-kraken.com is identified as a brand_impersonation threat targeting the Kraken cryptocurrency exchange platform. Analysis confirms the domain is currently offline, though it previously hosted content mimicking legitimate Kraken services under the page title 'Kraken: Buy and sell crypto securely.' This domain poses a high-risk phishing vector aimed at deceiving users into disclosing sensitive credentials or financial information. Infrastructure analysis reveals the domain was registered on November 28, 2025, through OwnRegistrar, Inc. It resolved to the IP address 188.114.96.3, hosted on Cloudflare, Inc. (AS13335) infrastructure. The domain lacks an SSL certificate, increasing susceptibility to interception. Detection metrics indicate 21 of 95 security vendors on VirusTotal flagged the domain as malicious, while Google Safe Browsing explicitly labels it as phishing. The domain appears on one security blocklist, and additional monitoring systems have classified it as a confirmed threat. Current status confirms the domain has been taken offline, though residual risk remains for users who may have interacted with it prior to deactivation. Organizations and individuals are advised to block the domain at the DNS or firewall level, monitor for credential compromise among users who accessed the site, and verify all transactions conducted during the domain's active period. Security teams should review logs for connections to 188.114.96.3 and correlate with known phishing campaigns targeting cryptocurrency platforms. Proactive measures include deploying indicators of compromise (IOCs) into threat intelligence feeds and educating users on identifying brand impersonation tactics in phishing attempts.