home-kraken-us-auth[.]square[.]site

PhishDestroy identifies home-kraken-us-auth.square.site as an elevated-risk domain actively impersonating the Kraken cryptocurrency exchange to harvest login credentials and drain wallets. This site poses a direct threat to Kraken users who may unknowingly enter their credentials into the fake login portal, enabling attackers to steal funds from connected crypto accounts.

This domain was flagged after VirusTotal returned 4 positive detections out of 95 security vendors, indicating confirmed malicious activity. The domain resolves to IP address 74.115.51.5 and operates under a valid Let's Encrypt SSL certificate. Registration was handled through MarkMonitor Inc., a common registrar for brand impersonation campaigns, and the domain was created on February 05, 2019, suggesting long-term malicious intent. Despite its age, the site continues to evade comprehensive takedown efforts, maintaining active status on multiple threat intelligence feeds.

To mitigate risk from this Kraken impersonation site, users must verify every login attempt through PhishDestroy before entering credentials. Never click links in unsolicited emails or messages claiming to be from Kraken. Enable two-factor authentication on your Kraken account and use official channels only. If you suspect exposure, immediately revoke any connected API keys and transfer funds to a secure wallet. Report suspicious domains to Kraken's abuse team and your cybersecurity provider.