karaken19[.]at

The domain karaken19.at is a phishing site that engages in brand impersonation, specifically targeting the cryptocurrency exchange Kraken. The site has been taken offline, but it previously posed an elevated risk to users by attempting to deceive them into providing sensitive information or credentials. As of the latest assessment, the domain is no longer active, but it is important to remain vigilant and avoid interacting with any similar domains that may still be operational.

karaken19.at was registered through Key-Systems GmbH on March 10, 2026, and resolves to the IP address 104.21.71.191, which is located in the United States and belongs to AS13335 Cloudflare, Inc. The domain has been flagged by 6 of 95 vendors on VirusTotal, including ADMINUSLabs, alphaMountain.ai, and CyRadar. It also appears on 1 security blocklist, PhishDestroy, and has a Gridinsoft trust score of 0 out of 100. The site was using an SSL certificate issued by Google Trust Services / WE1, and technologies detected include Cloudflare Browser Insights and HTTP/3. The page title observed was 'SLON3.CC | SLON3.AT |KRAB5.AT | KRAB5.CC | KRAB6.AT | KRAB6.CC - клады и сокровища', which suggests a Russian-language scam.

To protect against threats posed by karaken19.at or similar phishing sites, users should change their passwords and enable two-factor authentication (2FA) on their Kraken accounts. It is also advisable to monitor accounts for any unauthorized activity and report any suspicious incidents to Kraken's support team. Users can report the domain to their browser's built-in security systems and to organizations like PhishTank or the Anti-Phishing Working Group (APWG).