Выполняйте поиск по отслеживаемым доменам и просматривайте сохраненные доказательства, данные об обнаружениях и последние данные о доступности.
206,051
Всего отслеженных
200,682
Обнаружено VT
75,701
Последнее появление: активен
130,350
По последним данным — недоступно
6
VT — в процессе рассмотрения
How This Attack Works
Kraken phishing scams are sophisticated cyber threats aimed at stealing sensitive information from users. Understanding their mechanisms is crucial for effective defense.
STEP 1
Lure with Fake Emails
Attackers send emails that mimic official Kraken communications, prompting users to click on malicious links.
STEP 2
Redirect to Phishing Sites
Once the link is clicked, users are redirected to a counterfeit site resembling Kraken's official website.
STEP 3
Harvesting Credentials
The fake site prompts users to enter login credentials, which attackers capture for unauthorized access.
STEP 4
Monetizing Stolen Data
Attackers use the harvested credentials to drain accounts or sell data on the dark web.
Technical Analysis
Kraken phishing attacks typically employ spear-phishing techniques, using personalized emails to increase the likelihood of deception. Attackers often register domains with slight variations of the Kraken brand, such as 'krakenorlogin.godaddysites.com', to appear legitimate. They use HTTPS and SSL certificates to add a layer of trust, misleading users into believing the site is secure. Once on these sites, victims are prompted to enter their credentials. The phishing sites are often hosted on reputable platforms, leveraging services from top registrars like MarkMonitor, Inc. and Cloudflare, Inc. to avoid detection. Attackers may also employ JavaScript to dynamically alter content, making the sites harder to detect through automated scanning.
Real Cases
Kraken Credential Harvesting (2024)
$2 million stolen
A widespread phishing campaign targeted Kraken users, resulting in the theft of credentials and financial loss.
Kraken Phishing Blitz (2023)
$1.5 million stolen
Attackers launched a coordinated phishing attack using over 200 domains, tricking users into divulging sensitive information.
Kraken Email Spoofing Attack (2024)
$3 million stolen
Sophisticated spoofing emails led to a significant breach, compromising user accounts and leading to substantial financial losses.
How to Detect
Unusual email domains or sender addresses
Grammar and spelling errors in communications
Срочно or threatening language compelling immediate action
Mismatch between URL and Kraken's official site
Lack of HTTPS security on login pages
How to Protect Yourself
1
Verify the sender's email address for authenticity
2
Hover over links to check for mismatched URLs
3
Enable two-factor authentication on Kraken accounts
4
Regularly update passwords and security questions
5
Отчет suspicious emails to Kraken and PhishDestroy
Frequently Asked Questions
Data sourced from PhishDestroy threat intelligence database — 2,581 domains tracked for this threat type
Kraken Phishing 2,581 domains

id-kraken-controle.com

krakenorlogin.godaddysites.com

491862-kraken.com

krakens-pro.com

819248kraken.com

karmanakamloggen.godaddysites.com

kkrakiinlogix.godaddysites.com

kraken-35.cc

kraken-contract.com

krakenplay.com

krakexn8.vip

krkonlogui.webflow.io

netflix-clone-psi-seven.vercel.app

verifications-kraken.com

docs-kraken-help.zapier.app

kirncrakenlogiusa.webflow.io

kraakinlogii.godaddysites.com

krakencrypto.io

krakenkalogin.webflow.io

krakenm.vip

krakens-vip.com

krakenw.vip

krkrnin-lgn.webflow.io

transcript.krakenpolicyreview.com

crakenineyilogiusa.webflow.io

crkenuslogin.webflow.io

en-web-krrakun.pineapple.page

kkarakinlogin-in.godaddysites.com

kkrakkennllogain.webflow.io

kraken-en.com

kraken-krab9.sbs

kraken-ssylka.net

kraken.com.support.bc1qrkac4tkr20rl2ra33f69pud8wc9xgyyvarvdly.onyxoilgas.com

kraken2trfqodidvlh4aa337cpzfrhdlfldhve5nf7n.com

kraken2trfqodidvlh4aa337cpzfrhdlfldhve5nf7njhumwr7instadkrab1.ru

kraken31-at.com

kraken36-at.com

kraken59.cc

krakenfa.com

krakeninfowebsite.site

krakenmanual.cc

krakenz-logginz.godaddysites.com

krakienlgoinin.godaddysites.com

krakinuuloggen.webflow.io

kranataloooggin.godaddysites.com

krrakeionutyusloggin.webflow.io

krueekenlogin.webflow.io

kurkenlogup.godaddysites.com

support-en-app-doc.pineapple.page

usa-kraknlogin.pages.dev

88978-kraken.com

access-krakeen-us-dekstop.pineapple.page

admin.cs-kraken.digital

auth--kraken---cdn--auth.webflow.io

captcha-krab3-at.ru

cm-kraken.com

cover-kraken.com

crakanlogiin.webflow.io

explore-kra-keen--cds.pineapple.page

help-kraken-service-en.tem3.io

kkrakkennllogin.webflow.io

kra-2025.cc

kra31-at-kraken.com

kra31.pro

krab--1---cc.ru

kraken-apps-login.pages.dev

kraken-cd-en-learn.daftpage.com

kraken-gold-rush.net

kraken-klirnet-vhod.sbs

kraken-krab3.sbs

kraken-login-cdns.tem3.io

kraken-loginnus.webflow.io

kraken.i2005.buzz

kraken.msdesktop.nl

kraken13-at.net

kraken20-att.com

kraken2trade.com

kraken5af44k24fwzohe6fvqfgxfsee4lgydb3ayzkfhlzqhuwlo33ad.net

krakenapp.vip

krakenclearssylka.cc

krakendlgiin.godaddysites.com

krakendlugesa.godaddysites.com

krakenl0ginusa.webflow.io

krakens-tell.com

krakensinghi.godaddysites.com

krakensupp0rt.netlify.app

krakesennelogin.webflow.io

krakinnloggin.webflow.io

kraknkrakenlogn.webflow.io

krakogin-f.webflow.io
Процесс реагирования на угрозы
Как мы проверяем каждый домен в этом разделе и нейтрализуем подтверждённые угрозы. Полная визуализация конвейера →
Проверка по источникам данных об угрозах— каждый домен сканируется и сверяется со следующими источниками:
urlscan.ioСнимок экрана · DOM · HTTPVirusTotal90+ AV enginesGoogle Safe BrowsingTransparency ОтчетCloudflare RadarDNS · certs · categoriesAlienVault OTXThreat-intel pulsesWayback MachineHistorical evidenceabuse.ch ThreatFoxIOC correlationcrt.shCertificate TransparencyDNS Безопасность FiltersQuad9 · AdGuard · CleanBrowsingWeb-ПроверитьFull surface scan
Передача данных партнёрам— подтверждённые детекты передаются 29 партнёрам:
GoogleSafe BrowsingGoogleWeb Risk APIMicrosoftSmartScreenVirusTotalDetection feedCloudflareRadar / 1.1.1.1YandexSafe BrowsingURLScan.ioPublic scanESETWebGuardBitdefenderThreat exchangeNortonSafe WebSymantecОбзор сайтаAviraCloud detectionAvast / AVGWeb Shield«Касперский»OpenTIPDr.WebOnline scannerNetcraftЛиквидация APIPhishTankVerified voteAPWG eCXBulk feedPhishStatsOpen feedPhish.ОтчетHosting abuseSpamhausDBL feedPolySwarmMarketplaceCheckPhishBolster scanQutteraMalware scanURLquerySandboxCriminal IPAsset intelCRDFThreat CenterScamadviserTrust scoreMyWOTWeb of Trust