# kraken24web.com — SUSPICIOUS

> PhishDestroy identifies kraken24web.com as a Kraken-brand impersonation domain flagged by 2 of 95 VirusTotal scanners.

## Summary
PhishDestroy identifies kraken24web.com as an active brand impersonation threat targeting users of the legitimate cryptocurrency exchange Kraken. This domain masquerades as a genuine Kraken service page, designed to deceive visitors into entering login credentials, payment details, or personal information under the false pretense of trading or account access. The threat operates through social engineering, leveraging Kraken’s brand recognition to lower user suspicion and increase the likelihood of successful credential harvesting or financial theft. Technical analysis confirms the domain is not affiliated with Kraken and lacks official validation, making any interaction with this site inherently risky.  This domain was flagged by 2 out of 95 security vendors on VirusTotal, indicating limited but present detection of its malicious nature. It was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED on March 10, 2023, and resolves to IP address 172.67.166.64, which is associated with known malicious hosting infrastructure. Despite possessing a valid SSL certificate issued by Google Trust Services, this does not confer legitimacy, as threat actors frequently abuse trusted certificate authorities to enhance the appearance of authenticity. The combination of recent domain creation, low detection rate, and abuse of a reputable brand highlights an elevated risk of exposure to fraudulent activity.  If you have visited kraken24web.com, immediately cease any interaction and do not enter sensitive information such as passwords, credit card numbers, or cryptocurrency wallet keys. Check your Kraken account for unauthorized access and enable two-factor authentication if not already active. Update your device’s password manager to block this domain and run a full antivirus scan. Report the domain to Kraken’s abuse team and your organization’s security team if applicable. Avoid clicking links in emails or messages purporting to be from Kraken, and always verify URLs by typing them manually or using bookmarked official links. Stay vigilant: legitimate Kraken services use only kraken.com or verified regional domains.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)
- Target brand: Kraken

## Domain Intelligence
- Registered: 2023-03-10 13:01:10
- Registrar: NICENIC INTERNATIONAL GROUP CO., LIMITED
- IP: 172.67.166.64

## Detection Status
- VirusTotal: 2 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/c6937e1c-f8c2-4bdc-87e0-3a81f3c4ca67
- PhishDestroy: https://phishdestroy.io/domain/kraken24web.com/
- LLM endpoint: https://phishdestroy.io/domain/kraken24web.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/kraken24web.com/
Last updated: 2026-03-27