# kraken53.cc — MALICIOUS

> kraken53.cc is a crypto drainer impersonating Kraken, flagged by 13 of 95 VirusTotal vendors. Verify safety on PhishDestroy before any interaction.

## Summary
PhishDestroy identifies kraken53.cc as an active crypto drainer domain impersonating the cryptocurrency exchange Kraken.

This domain was flagged by 13 of 95 VirusTotal security vendors upon initial scan. It was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED on January 04, 2025, resolving to IP address 172.67.201.77 under a Google Trust Services SSL certificate. The domain exhibits clear indicators of brand impersonation targeting Kraken users, with no legitimate association to the exchange.

The elevated risk status of this domain stems from its dual functionality as both a fraudulent login portal and potential crypto drainer. Technical indicators include the malicious impersonation of a major cryptocurrency brand, recent registration date suggesting opportunistic launch, and hosting infrastructure commonly associated with fraudulent schemes. Current recommendations include immediate blocking of this domain at network and endpoint levels, verification of any Kraken-related communications against official channels only, and reporting to PhishDestroy for community-wide protection. Users should exercise extreme caution and avoid any interaction with sites accessed through kraken53.cc links. This domain represents an active and evolving threat to cryptocurrency users seeking to verify legitimate Kraken resources.

## Threat Details
- Verdict: MALICIOUS
- Site status: unknown (HTTP ?)
- Target brand: Kraken

## Domain Intelligence
- Registered: 2025-01-04 18:56:45
- Registrar: NICENIC INTERNATIONAL GROUP CO., LIMITED
- IP: 172.67.201.77

## Detection Status
- VirusTotal: 13 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/90b9e326-b19a-45fb-9628-31abf3ee0286
- PhishDestroy: https://phishdestroy.io/domain/kraken53.cc/
- LLM endpoint: https://phishdestroy.io/domain/kraken53.cc/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/kraken53.cc/
Last updated: 2026-03-26