otckraken[.]online

PhishDestroy identifies otckraken.online as an active brand impersonation scam targeting Kraken users, designed to deceive visitors into surrendering sensitive account credentials or installing malware. This domain mirrors Kraken's official branding to exploit trust, leveraging a fraudulent SSL certificate issued by Google Trust Services to appear legitimate. Attackers often register domains mimicking reputable brands to harvest login details, crypto wallet seeds, or two-factor authentication codes, which are then used to drain accounts or sell credentials on dark web markets. This domain was flagged by PhishDestroy during a routine threat assessment due to its malicious intent and suspicious infrastructure. Evidence includes a VirusTotal detection rate of 3/95, indicating no antivirus engines have yet flagged its payloads, likely due to its recent activation. It was registered through REGISTER S.P.A. on April 15, 2026, a suspiciously recent creation that aligns with the domain’s short operational lifespan. Additionally, otckraken.online has already been listed on 2 security blocklists, including MetaMask and SEAL, which actively block access to the site. The domain resolves to IP 216.239.32.21, a Google-operated address that may be compromised or misused to host malicious content. If you visited otckraken.online, assume your credentials or device may have been compromised. Immediately change your Kraken account password using a secure, isolated device and enable two-factor authentication (2FA) via an authenticator app or hardware key. Scan your device with reputable antivirus software like Malwarebytes or Windows Defender, and revoke any unauthorized API keys or device sessions in your Kraken account settings. Avoid reusing passwords across platforms, as credentials exposed here could be tested against other services. Report the domain to Kraken’s abuse team and consider monitoring your email for phishing attempts. For future protection, bookmark Kraken’s official site directly and verify URLs before entering sensitive information.