krakensite-market[.]cc

PhishDestroy identifies krakensite-market.cc (seed 4537fd) as a live brand impersonation phishing domain targeting Kraken exchange users. This domain mimics the official Kraken brand to deceive visitors into interacting with a fraudulent crypto trading interface, likely functioning as a drainer kit designed to siphon cryptocurrency from victims. The page title matches the domain name exactly, and the site appears to be part of a coordinated campaign leveraging Kraken’s reputation to trick users into entering wallet credentials or initiating malicious transactions.

This domain exhibits several high-risk technical indicators: it is unflagged on VirusTotal with a detection score of 2/95, indicating no antivirus or security engine has yet identified its malicious payload. The domain resolves to IP address 86.54.25.38 and was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED on March 13, 2025 — a recently established domain with a suspicious creation timeline aligned with active phishing operations. As of this report, the domain remains unblocked by Google Safe Browsing (GSB) and has not been flagged on major threat intelligence blocklists, leaving users fully exposed.

The domain is currently active and poses an immediate threat to cryptocurrency users. PhishDestroy has flagged this domain for active takedown monitoring and inclusion in the global phishing database. While the current risk level is listed as 'under_investigation', the absence of detections and recent registration strongly suggest advanced evasion tactics. Users are urged to avoid accessing krakensite-market.cc and report it via their browser or security tools. All crypto users should verify URLs using Kraken’s official domains and enable hardware wallet authentication. The risk remains high until automated and manual takedowns are completed and detection signatures are updated.