portal[.]mykraken[.]life

PhishDestroy has flagged portal.mykraken.life for active brand impersonation targeting Kraken users. This domain masquerades as a legitimate Kraken portal with a deceptive page title 'My Kraken,' aiming to harvest login credentials or facilitate crypto drainer attacks. The risk level remains under investigation due to evolving tactics, but the intent to deceive is clear and immediate action is required to prevent credential theft or financial loss.

This domain was flagged with 4/95 VirusTotal detections, indicating it has evaded initial automated scans. It resolves to IP 167.71.174.207 and uses a Let's Encrypt SSL certificate to appear legitimate. The page title 'My Kraken' directly mimics Kraken’s branding, a common tactic in brand impersonation schemes. While creation date, registrar, and blocklist status are not specified, the combination of low detection rates and active impersonation tactics suggests a high-risk, evolving threat.

To mitigate this risk, users should avoid interacting with portal.mykraken.life entirely. Verify any Kraken-related links through official channels only. Report suspicious domains to PhishDestroy for further analysis. Organizations should block the IP 167.71.174.207 at the network level to prevent access. Always cross-check domains against trusted sources before entering credentials or financial information.