# kraken27-at.com — MALICIOUS

> kraken27-at.com is an active brand impersonation targeting Kraken users. Created Jan 29, 2024, it has a high VirusTotal score (15/95). Check the full report.

## Summary
PhishDestroy has identified kraken27-at.com as an active and elevated threat, specifically designed for brand impersonation targeting users of the cryptocurrency exchange, Kraken. This means the site likely attempts to steal login credentials or other sensitive information by mimicking the legitimate Kraken website. Users may be tricked into entering their usernames, passwords, or recovery phrases, believing they are interacting with the real Kraken platform.  

Our analysis reveals several indicators of malicious activity. VirusTotal reports that 15 out of 95 security vendors have flagged the domain as dangerous. The domain was recently created on January 29, 2024, a common tactic used by malicious actors to quickly deploy phishing sites. It is registered through NICENIC INTERNATIONAL GROUP CO., LIMITED and resolves to the IP address 188.114.97.3. The site uses an SSL certificate issued by Let's Encrypt, which, while providing encryption, does not guarantee the legitimacy of the website. The combination of these factors points to a high probability of malicious intent.  

If you have visited kraken27-at.com and entered any personal information, such as your Kraken login credentials or recovery phrases, it is crucial to take immediate action. Change your Kraken password immediately and enable two-factor authentication if you haven't already. Report the incident to Kraken support and monitor your account for any unauthorized activity. Exercise extreme caution when clicking on links or entering personal information online, especially when dealing with cryptocurrency-related websites. Always double-check the domain name and look for other signs of authenticity before entering any sensitive data.

## Threat Details
- Verdict: MALICIOUS
- Site status: unknown (HTTP ?)
- Target brand: Kraken

## Domain Intelligence
- Registered: 2024-01-29 13:22:34
- Registrar: NICENIC INTERNATIONAL GROUP CO., LIMITED
- IP: 188.114.97.3

## Detection Status
- VirusTotal: 15 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/0e03dc6c-0adc-418d-94a9-2b974a11e7bc
- PhishDestroy: https://phishdestroy.io/domain/kraken27-at.com/
- LLM endpoint: https://phishdestroy.io/domain/kraken27-at.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/kraken27-at.com/
Last updated: 2026-03-28