kraken-offical[.]net

PhishDestroy identifies kraken-offical.net as a confirmed brand impersonation phishing domain targeting the cryptocurrency exchange Kraken. The domain was created on March 28, 2026, and registered through Gname.com Pte. Ltd., a registrar often associated with malicious domains. It resolves to IP address 172.65.211.209 and lacks an SSL certificate, further indicating its fraudulent nature. The site was likely designed to steal login credentials or other sensitive information from Kraken users.

Technical indicators show that VirusTotal flagged the domain with a score of 9 out of 95 security vendors, indicating significant malicious detection. The domain appears in one AlienVault OTX threat intelligence pulse and is listed on one security blocklist. Google Safe Browsing status is not explicitly mentioned, but the domain's presence on blocklists suggests it was flagged for phishing. The domain's creation date and registration details align with typical patterns for phishing campaigns, which often use recently registered domains and obscure registrars to evade detection.

As of the latest intelligence, kraken-offical.net is offline, which suggests that either the hosting provider or registrar took action to suspend the domain. However, users should remain vigilant as similar domains may appear. PhishDestroy recommends that Kraken users avoid entering credentials on any site that is not the official Kraken domain, enable two-factor authentication, and report any suspicious domains to the brand. The risk is elevated due to the brand impersonation and the domain's malicious indicators, but the offline status reduces immediate threat. Users who may have interacted with the site should change their passwords and monitor accounts for unauthorized activity. The unique seed for this analysis is 668811.