oldkraken[.]help

PhishDestroy has detected active brand impersonation on oldkraken.help, a fraudulent site mimicking the legitimate Kraken cryptocurrency exchange. This malicious domain leverages Kraken’s trusted brand to deceive users into revealing login credentials or financial details. The threat actor registered the domain on February 28, 2026, through Dynadot LLC and hosts it on IP 64.29.17.65 with a Let’s Encrypt SSL certificate to appear legitimate. While currently undetected by most antivirus engines—showing 0 detections out of 95 scans on VirusTotal—this site poses a credible risk to unsuspecting visitors.

The domain was flagged under seed a81361 following automated analysis that identified its intent to impersonate Kraken, a well-known digital asset exchange. The site’s recent creation date, along with its use of a reputable registrar and valid SSL certificate, are tactics commonly used to bypass initial security checks. These red flags highlight the importance of verifying website authenticity before entering sensitive information. Users should treat any unsolicited links to oldkraken.help with extreme caution, especially those claiming to offer support or urgent account actions.

If you visited oldkraken.help or entered any details on the site, immediately change your Kraken account password and enable two-factor authentication. Review your account for unauthorized transactions and consider revoking any API keys exposed there. Report the incident to Kraken’s official support and run a malware scan using a trusted antivirus tool. Avoid clicking links from emails or messages related to this domain, and always access Kraken directly via their verified website or app.