kraken2trfqodidvlh4aa337cpzfrhdlfldhve5nf7njh7instad[.]com

PhishDestroy has identified kraken2trfqodidvlh4aa337cpzfrhdlfldhve5nf7njh7instad.com as a high-risk domain engaging in brand impersonation, specifically targeting users of the Kraken cryptocurrency exchange. This malicious website attempts to steal login credentials by presenting a fake Kraken login page. Unsuspecting users who enter their username and password on this fraudulent site risk having their accounts compromised and their cryptocurrency stolen. This constitutes a serious security threat.

Evidence supporting this classification includes a VirusTotal analysis showing that 6 out of 95 security vendors flag the domain as malicious. The domain was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED. Further raising suspicion, the domain was created relatively recently on October 19, 2025. These factors, combined with the obvious attempt to mimic the legitimate Kraken website, paint a clear picture of a malicious operation designed to deceive and defraud Kraken users. The domain resolves to IP address 86.54.25.38. The page title also simply repeats the domain name, which is another indicator of malicious intent.

Users who have visited kraken2trfqodidvlh4aa337cpzfrhdlfldhve5nf7njh7instad.com are strongly advised to take immediate action. If you entered your Kraken username and password on this site, change your password immediately on the legitimate Kraken website. Enable two-factor authentication for added security. Monitor your Kraken account for any unauthorized activity. Be wary of any emails or phone calls claiming to be from Kraken, as these could be part of a follow-up phishing attack. Report the incident to Kraken support and consider reporting the domain to relevant authorities.