kraken-clone[.]vercel[.]app

This domain, kraken-clone.vercel.app, poses a high-risk brand impersonation threat specifically targeting users of the Kraken cryptocurrency exchange platform. Analysis indicates the site is designed to replicate the appearance and functionality of the legitimate Kraken platform, likely with the intent to harvest login credentials, private keys, or other sensitive authentication details. The presence of a cloned interface combined with the domain's deceptive naming convention suggests a deliberate attempt to exploit trust in the Kraken brand, potentially leading to unauthorized account access or financial theft. Infrastructure analysis reveals multiple concrete indicators of malicious activity. The domain is flagged by 4 out of 95 security vendors on VirusTotal, while Google Safe Browsing has explicitly classified it as phishing. Registered through Vercel Inc. on April 14, 2026, the domain resolves to IP address 216.198.79.131, hosted within the United States. Notably, the domain appears on three distinct security blocklists, including protections from wallet security providers. The SSL certificate, issued by Google Trust Services under the WR1 root, provides encryption but does not validate legitimacy, as malicious actors frequently abuse free certificate authorities to lend false credibility to fraudulent sites. Users who have visited kraken-clone.vercel.app should take immediate remedial action. Any credentials, recovery phrases, or private keys entered on this domain should be considered compromised and revoked without delay. Affected individuals must rotate all passwords, enable multi-factor authentication on legitimate accounts, and monitor for unauthorized transactions. Wallet holders should transfer assets to a new, secure wallet using a clean device to prevent persistent access. Given the domain remains active, users are advised to block the domain at the network level and report it to relevant security teams for further mitigation.