kurkenlogup[.]godaddysites[.]com

The domain kurkenlogup.godaddysites.com is identified as a high-risk brand impersonation threat specifically targeting Kraken, a well-known cryptocurrency exchange platform. Analysis indicates the site presents a fraudulent login interface, titled Kr𝖆ken Login, designed to deceive users into submitting credentials or sensitive financial information. As of the latest assessment, the domain has been taken offline, though prior activity remains a concern for historical exposure. Infrastructure analysis reveals the domain was registered through GoDaddy.com, LLC, a widely used registrar, and resolves to the IP address 76.223.105.230. The domain was originally created on November 18, 2013, though the malicious subdomain likely emerged much later. Detection metrics show 18 of 95 security vendors on VirusTotal flagged the domain as malicious, while it appears on at least one security blocklist. Google Safe Browsing has also classified the site as phishing. The SSL certificate, issued by GoDaddy.com, Inc. under the Go Daddy Secure Certificate Authority - G2, does not mitigate the underlying threat, as phishing sites frequently employ valid certificates to appear legitimate. Current status confirms the domain is offline, reducing immediate risk to users. However, the infrastructure and tactics observed align with persistent phishing campaigns targeting cryptocurrency users. Organizations and individuals are advised to block the domain and associated IP at the network level, revoke any credentials potentially exposed to the site, and monitor for unauthorized transactions. Users should verify domain authenticity by cross-referencing official communication channels and employing multi-factor authentication to mitigate credential theft risks. Security teams are encouraged to review logs for connections to 76.223.105.230 or related subdomains to assess potential compromise.