panel[.]krakensys[.]xyz

PhishDestroy identifies panel.krakensys.xyz as an active brand impersonation domain designed to mimic the legitimate Kraken cryptocurrency exchange login portal. The site poses a direct credential theft risk by presenting users with fake authentication pages that harvest login credentials and potentially enable follow-on account takeovers. Current status remains active despite low detection rates, indicating a newly deployed threat vector requiring immediate user awareness. This domain was flagged by 11 of 95 VirusTotal vendors, demonstrating the limitations of automated detection against fresh impersonation campaigns. The domain was registered through Vautron Rechenzentrum AG on April 10, 2026, and resolves to IP address 213.199.63.79 under a Let's Encrypt SSL certificate. Despite lacking mass detection, the site shows clear indicators of malicious intent through its deceptive branding and lack of legitimate corporate affiliation. While under investigation, this domain represents an active threat to Kraken users who may inadvertently enter credentials on the false login panel. PhishDestroy advises users to bookmark only kraken.com login URLs and verify any suspicious links through official Kraken communication channels before inputting sensitive information. Network administrators should block traffic to 213.199.63.79 at perimeter defenses. This assessment will be updated as additional threat intelligence becomes available.