kra-40at[.]net

The domain kra-40at.net is flagged for brand impersonation, specifically targeting the cryptocurrency exchange Kraken. Analysis indicates that the domain does not use an SSL certificate, which is a common indicator of a lack of security and trustworthiness. The domain resolves to the IP address 172.67.147.147, which is hosted by Cloudflare, Inc. in the United States.

Infrastructure analysis reveals that the domain was created on August 21, 2025, and is registered through NiceNIC International Group Co., Limited. On VirusTotal, 16 out of 95 security vendors flag this domain as malicious, indicating a significant level of suspicion. The domain appears on 1 security blocklist and is blocked by PhishDestroy. The page title found is 'Kra40 at — Официальный вход на Kraken | Kra40 cc магазин,' which suggests an attempt to impersonate the official Kraken website and potentially lure users into a fraudulent scheme.

The current status of kra-40at.net is offline, having been taken down. Despite this, the domain's previous active state and the elevated risk level suggest that it poses a threat to users who may have interacted with it. Response actions have included blocking by security vendors and the domain being added to blocklists. However, the risk remains due to the potential for the domain to be reactivated or for users to still have saved links or bookmarks leading to it. Users are advised to verify the authenticity of any Kraken-related websites and avoid clicking on untrusted links.