kraken22-at[.]com

This domain, kraken22-at.com, poses as the legitimate Kraken cryptocurrency exchange platform to deceive users into disclosing login credentials or transferring funds to attacker-controlled wallets. The site uses the exact brand name and page title 'KRAKEN' to create a false sense of authenticity, a common tactic in brand impersonation schemes targeting financial services. Victims may unknowingly expose sensitive account details, leading to unauthorized access or direct theft of digital assets. Analysis indicates kraken22-at.com was registered on March 27, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar frequently associated with malicious domains. The domain resolves to IP address 104.21.42.89 and is flagged by 15 out of 95 security vendors on VirusTotal, including detection as a phishing resource. It appears on one security blocklist and is referenced in a single AlienVault OTX threat intelligence pulse, further confirming its malicious classification. The SSL certificate issued by Google Trust Services does not mitigate the threat, as encrypted phishing sites are now standard in credential theft operations. If you visited kraken22-at.com or entered any information on the site, immediately cease all interaction and do not re-enter credentials. Change passwords for your Kraken account and any other platforms where the same credentials were used. Enable multi-factor authentication on all financial and email accounts. Monitor your Kraken account for unauthorized transactions and report any suspicious activity to the official exchange support team. Consider revoking active sessions and API keys associated with the account. Users should also scan their devices for malware, as phishing sites may deploy additional payloads to maintain persistence or capture keystrokes.