krakentor0[.]com

PhishDestroy identifies krakentor0.com as an active site impersonating the Kraken cryptocurrency exchange to harvest user credentials. The domain uses HTTPS (certificate issued by Google Trust Services) to appear legitimate, but 8 of 95 VirusTotal security vendors already flag it as malicious. Registered on February 02, 2024 through NICENIC INTERNATIONAL GROUP CO., LIMITED, this impostor resolves to IP 188.114.96.3 and is designed to trick visitors into entering their Kraken login details.

This threat is a classic brand-impersonation phishing attack. Threat actors registered krakentor0.com recently and are leveraging the trust associated with Kraken to deceive users. The domain’s HTTPS certificate issued by Google Trust Services adds a veneer of authenticity, but security vendors are already catching on—8 out of 95 scanners have detected malicious activity. The domain’s recent creation date and the involvement of a lesser-known registrar suggest opportunistic registration aimed at capitalizing on Kraken’s brand recognition.

If you visited krakentor0.com—especially if you entered any login credentials—immediately change your Kraken account password using Kraken’s official website or app. Enable two-factor authentication (2FA) if you haven’t already. Scan your device with updated antivirus software and monitor your accounts for unauthorized transactions. Report the domain to Kraken’s abuse team and avoid interacting with it further. Always verify links by typing the legitimate URL directly into your browser or using official Kraken communication channels.