kraken2trfqodidvlh4aa337cpzfrhdlfldhve5nf7njhumwr7instad7[.]com

This domain, kraken2trfqodidvlh4aa337cpzfrhdlfldhve5nf7njhumwr7instad7.com, poses an elevated risk as a brand impersonation threat specifically targeting Kraken. It is a crypto drainer designed to trick users into connecting their wallets, leading to asset theft. The domain is currently offline, but its infrastructure and registration details indicate a sophisticated operation.

According to VirusTotal, 2 out of 95 security vendors flagged this domain, and it appears on one security blocklist. The domain was created on March 27, 2026, and resolves to IP 188.114.97.3. It was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED and uses an SSL certificate from Google Trust Services (WE1). AlienVault OTX detected it in one threat intelligence pulse, confirming its malicious intent.

To protect against this brand impersonation crypto drainer, users should never connect their wallets or enter credentials on suspicious domains. Verify URLs by checking official Kraken channels and use browser extensions that block known phishing sites. If you have interacted with this domain, immediately revoke any wallet approvals and change your passwords. Report the domain to relevant authorities to help disrupt further attacks.