help-krakenhelp[.]daftpage[.]com

The domain help-krakenhelp.daftpage.com has been identified as a brand impersonation phishing site specifically targeting Kraken cryptocurrency exchange users. The phishing page, which displayed the title "login | Kraquen," is now offline, having been taken down after detection. This domain was created on October 24, 2021, and was registered through OVH, SAS. It resolved to IP address 216.150.16.65 and was flagged as phishing by Google Safe Browsing. The SSL certificate was issued by Let's Encrypt (R13). VirusTotal analysis shows that 10 out of 95 security vendors flagged this domain as malicious, and it appears on 1 security blocklist. The domain is currently offline, but users who may have interacted with it should change their Kraken account credentials immediately and enable two-factor authentication. PhishDestroy strongly advises all cryptocurrency users to verify URLs before entering sensitive information and to rely on official exchange domains only. Even though this site is no longer active, similar phishing attempts may emerge, so vigilance is crucial. Always double-check the URL for subtle misspellings like "Kraquen" instead of "Kraken." If you suspect your account has been compromised, contact Kraken support directly and monitor your account for unauthorized activity. Remember that legitimate exchanges will never ask for your password or private keys via email or third-party websites. Stay safe and report any suspicious domains to security teams.