kraken53[.]cc

PhishDestroy identifies kraken53.cc as an active crypto drainer domain impersonating the cryptocurrency exchange Kraken.

This domain was flagged by 13 of 95 VirusTotal security vendors upon initial scan. It was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED on January 04, 2025, resolving to IP address 172.67.201.77 under a Google Trust Services SSL certificate. The domain exhibits clear indicators of brand impersonation targeting Kraken users, with no legitimate association to the exchange.

The elevated risk status of this domain stems from its dual functionality as both a fraudulent login portal and potential crypto drainer. Technical indicators include the malicious impersonation of a major cryptocurrency brand, recent registration date suggesting opportunistic launch, and hosting infrastructure commonly associated with fraudulent schemes. Current recommendations include immediate blocking of this domain at network and endpoint levels, verification of any Kraken-related communications against official channels only, and reporting to PhishDestroy for community-wide protection. Users should exercise extreme caution and avoid any interaction with sites accessed through kraken53.cc links. This domain represents an active and evolving threat to cryptocurrency users seeking to verify legitimate Kraken resources.