kraken5af44k24fwzohe6fvqfgxfsee4lgydb3ayzkfhlzqhuwlo33ad[.]com

This domain posed an elevated risk as a brand impersonation threat specifically tailored to mimic Kraken, a well-known cryptocurrency exchange. The site attempted to deceive users into believing it was affiliated with Kraken, likely aiming to steal login credentials or crypto assets through a fraudulent interface.

According to available intelligence, the domain was flagged by 13 out of 95 security vendors on VirusTotal, indicating widespread recognition of its malicious nature. It was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED on March 29, 2026, and resolved to IP address 91.84.116.121. The SSL certificate was issued by Let's Encrypt (E8), a common choice for phishing sites. The page title was set to "adult only," a tactic often used to evade content filters. AlienVault OTX recorded it in one threat intelligence pulse, and it appeared on one security blocklist, further confirming its malicious intent. Fortunately, the domain is now offline.

Users who may have interacted with this site should immediately change their Kraken account passwords and enable two-factor authentication if not already active. It is also advisable to monitor account activity for unauthorized transactions and report any suspicious behavior to Kraken support. PhishDestroy recommends always verifying URLs before entering sensitive information and avoiding clicking on links from unsolicited communications.