kraken2at[.]com

PhishDestroy identifies kraken2at.com as an active domain posing a significant threat through brand impersonation, specifically targeting Kraken's cryptocurrency user base. The domain operates as a crypto drainer, attempting to deceive users with a fake login interface to harvest credentials and drain digital assets. This threat represents an elevated risk given the high value and sensitivity of crypto account information.

Technical intelligence reveals kraken2at.com was created recently on April 27, 2025, and is registered via NICENIC INTERNATIONAL GROUP CO., LIMITED, a detail relevant for tracking and takedown efforts. The domain resolves to IP address 188.114.96.3 and uses an SSL certificate issued by Google Trust Services, lending the site an appearance of legitimacy to potential victims. VirusTotal analysis detects 1 out of 95 security vendors flagging the domain, indicating it is on the radar but not yet widely blocked. Despite the low detection count, PhishDestroy has classified its risk level as elevated due to its direct impersonation of Kraken, a well-known cryptocurrency exchange.

Users who have visited kraken2at.com are strongly urged to avoid entering any login information or personal credentials on the site. Immediate action should include changing affected Kraken passwords, enabling two-factor authentication, and monitoring accounts for unauthorized transactions. Consulting security tools and verifying the domain status on PhishDestroy is recommended before engaging with any suspicious Kraken-related online portals. Proactive vigilance and reporting such fraudulent domains can mitigate potential crypto asset losses tied to this active scam.