# kraken4.vip — MALICIOUS

> kraken4.vip detected impersonating Kraken exchange with 13/95 VirusTotal flags. Verify the full report for safety.

## Summary
PhishDestroy identifies kraken4.vip as an active brand impersonation phishing domain targeting Kraken cryptocurrency exchange users. This malicious site mimics Kraken’s branding to steal login credentials and financial data, posing a direct threat to cryptocurrency holders.

This domain was flagged by 13 out of 95 security vendors on VirusTotal, indicating widespread suspicion. Registered through NICENIC INTERNATIONAL GROUP CO., LIMITED on November 22, 2025, the site resolves to IP 86.54.25.38. Its recent creation and low trust scores make it a high-risk phishing trap for unsuspecting users.

If you visited kraken4.vip, immediately change your Kraken account password and enable two-factor authentication. Scan all devices for malware using reputable antivirus software. Avoid entering any credentials on this domain and report it to Kraken’s fraud team. Consider using a password manager to prevent future phishing attempts.

## Threat Details
- Verdict: MALICIOUS
- Site status: unknown (HTTP ?)
- Target brand: Kraken
- Page title: kraken4.vip

## Domain Intelligence
- Registered: 2025-11-22 00:00:14
- Registrar: NICENIC INTERNATIONAL GROUP CO., LIMITED
- IP: 86.54.25.38

## Detection Status
- VirusTotal: 13 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/2ad8e352-cb2f-4134-b4c4-84d99905d31d
- PhishDestroy: https://phishdestroy.io/domain/kraken4.vip/
- LLM endpoint: https://phishdestroy.io/domain/kraken4.vip/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/kraken4.vip/
Last updated: 2026-03-28