krakenb19[.]at

The domain krakenb19.at was registered on 28 March 2026 and is currently taken offline, returning HTTP 403 for all requests. Passive DNS shows it resolves to the Cloudflare‑owned address 188.114.97.3, located in Canada. The TLS certificate presented is issued by Google Trust Services under the WE1 label, indicating use of a legitimate certificate authority but not mitigating the malicious intent. The site is flagged by PhishDestroy and appears on a single external blocklist; its Gridinsoft trust score is 0 / 100, reinforcing the low reputation.

VirusTotal scans reported 2 detections out of 94 engines, confirming that at least a minority of security products recognize the domain as malicious. An AlienVault OTX pulse references the domain in one threat‑intel feed, providing additional community corroboration. The threat profile attributes the site to a “Fake Exchange” campaign that impersonates the cryptocurrency exchange Kraken, aligning with the declared brand target. No further public page content or page‑title information is available, so the exact visual or functional characteristics of the landing page remain unknown.

Defenders should immediately block krakenb19.at at DNS and proxy layers, add the associated IP 188.114.97.3 to network‑level deny lists, and ensure that Safe Browsing or similar URL‑reputation services are enabled. Continuous monitoring of newly registered domains that combine the Kraken brand name with the “b19” suffix is advisable, as the registration pattern may be reused in future campaigns. Incident response teams should also review any authentication attempts to Kraken services that originated from this IP range, and consider user‑education messages that warn employees about unsolicited Kraken‑related login prompts.