kraken-supportteam[.]com

PhishDestroy identifies kraken-supportteam.com as an active brand impersonation phishing domain targeting Kraken users. The domain mimics Kraken’s support infrastructure to deceive victims into entering credentials or downloading drainer kits. No confirmed drainer kit was observed in available telemetry, but the site’s SSL certificate and Let’s Encrypt issuance suggest a low-cost, rapid deployment strategy typical of opportunistic phishing operations.

This domain exhibits multiple technical indicators of malicious intent. VirusTotal reports a detection score of 4 out of 95 security vendors. It is registered through OwnRegistrar, Inc., resolves to IP 188.114.97.3, and was created on March 28, 2026. Google Safe Browsing classifies it under SOCIAL_ENGINEERING, and it is blocked by two security blocklists including SEAL and MetaMask. These factors collectively indicate a recently activated and actively distributed threat with elevated risk potential.

As of current analysis, kraken-supportteam.com remains active and is being actively blocked by major security platforms. Immediate defensive actions include blocking the domain at DNS and network levels, flagging the IP and SSL certificate, and updating user awareness campaigns to avoid interaction. Despite active blocking, the domain’s recent creation and low detection rate suggest it may remain active for several days before full takedown. Users are advised to treat any unsolicited support communications referencing Kraken as suspicious and to verify via official channels. The residual risk remains elevated due to the domain’s active status and partial detection coverage.