krakenmp[.]com

This domain krakenmp.com is classified as a brand impersonation campaign targeting Kraken, with infrastructure consistent with credential harvesting or account takeover attempts. The page is currently active and presents a Cloudflare interstitial ('Attention Required!'), which is commonly used to mask upstream phishing content or filter traffic prior to malicious redirection. The impersonation objective is to deceive users into interacting with a fraudulent exchange-like interface or authentication flow.

Technical indicators confirm malicious activity. VirusTotal reports 17/95 security vendors flagging the domain as malicious. The domain was created on October 19, 2025 and is registered through NiceNIC International Group Co., Limited. It resolves to IP 104.21.6.93 and is hosted within AS13335 (Cloudflare, Inc.) infrastructure located in the United States. Google Safe Browsing explicitly flags the domain as phishing. The domain appears on 1 security blocklist and is protected using a Google Trust Services SSL certificate (WE1), which may be used to increase perceived legitimacy.

Although currently active, the domain remains under active monitoring and blocking by multiple security systems including PhishDestroy. Users accessing this domain face high risk of credential compromise, particularly for exchange login data or multi-factor authentication tokens. Recommended mitigations include blocking the domain at DNS and endpoint level, alerting users who attempted access, and monitoring for unauthorized cryptocurrency account activity. Any credentials entered on this domain should be considered compromised and rotated immediately, with additional review of linked financial accounts.