kraken-market-url[.]com

PhishDestroy identifies kraken-market-url.com as an active brand impersonation domain that specifically targets Kraken users. The site mimics the legitimate Kraken cryptocurrency exchange interface to harvest login credentials and financial data. Analysis places this domain at an elevated risk level due to its deceptive branding, live infrastructure, and minimal detection coverage. Security teams and end users should treat this domain as hostile immediately. This domain was flagged by VirusTotal with a detection ratio of 1 out of 95 security vendors, indicating extremely low coverage against the threat. It resolves to IP address 188.114.97.3 and uses a valid Let's Encrypt SSL certificate to appear legitimate. The domain was created on March 08, 2026, and is registered through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar known for bulk domain registrations. There are no current blocklist entries in major threat intelligence feeds, and the domain remains accessible at the time of analysis. Trust scores for SSL reputation and domain age are favorable, which may increase user trust despite the malicious intent. Brand impersonation domains like kraken-market-url.com rely on urgency and visual mimicry to trick users into entering sensitive credentials. Kraken users who access this domain risk credential theft, unauthorized account access, and potential financial loss. To mitigate this threat, users should avoid clicking on unsolicited links related to Kraken and always verify domains via official channels. Organizations should add this domain and IP to firewall deny lists and monitor for related phishing campaigns. Implementing multi-factor authentication on Kraken accounts provides an additional layer of security even if credentials are compromised. Report any encounters with this domain to Kraken’s abuse team and relevant threat intelligence platforms to aid in takedown efforts.