Phishing detection: portal.mykraken.exchange
Kraken Screenshot
Screenshot captured by urlscan.io on 2026-10-21T14:13 UTC: our own render of this page came back blank.
Investigate
Domain
portal.mykraken.exchange0 CT hosts on apex
urlscan
VirusTotal
Whois
IP
159.65.231.64
ipinfo
Greynoise
URL
https://portal.mykraken.exchange
Phishunt analysis Beta
35
medium suspicion suspiciousheuristic risk score · not a probability
Why?
- +6.1 Google Safe Browsing
- +5.3 Keyword match
- +5.1 Site cluster
- +4.5 Brand in title
- +4.1 Brand in screenshot
- +3.0 ASN reputation
- +1.1 No CSP header
- +1.1 No HSTS header
- +0.9 Young certificate
- +0.8 Young domain
- +0.7 Brand in cert SAN
- +0.7 Unrecognised DNS provider
- +0.6 Suspicious TLD
- +0.5 Long domain
- +0.3 Free CA
- +0.1 External scripts
- +0.1 Deep subdomain
19 signals fired · detector v3.0.0
AI analysis AIBeta
Credential harvesting
Kraken crypto exchange impersonation using a portal subdomain on a lookalike .exchange domain, with Kraken in the page title, hosted on DigitalOcean. Flagged by Google Safe Browsing as social engineering. Likely steals exchange credentials.
Brand in titleGoogle Safe BrowsingNo brand links
AI-generated from stored detector signals - the AI never visited the site. · 2026-10-21 · confidence 75%
Domain & Network
Whois
Registrar
Tucows Domains Inc.
Network
IP
159.65.231.64 DigitalOcean
Country
United States
United States
Hosting
DigitalOcean, LLC
ASN
AS14061
TLS Cert
YE1
External detection
Google Safe Browsing
GSB category: SOCIAL_ENGINEERING
CleanOpenPhish · PhishTank · TweetFeed · urlscan.io
Requests
Resources
Observables
Related websites
Report this phishing
Submit to blocklists