# kraken59.cc — MALICIOUS

> PhishDestroy identifies kraken59.cc as a live Kraken brand impersonation domain. This crypto phishing site has 11/95 VirusTotal detections.

## Summary
PhishDestroy identifies kraken59.cc as an active domain engaged in brand impersonation targeting Kraken users. The threat level is elevated due to the combination of recent domain registration, low trust scores, and direct impersonation tactics. This campaign poses a credible risk to cryptocurrency users seeking legitimate Kraken services.  This domain was flagged with 11 out of 95 security vendors on VirusTotal, placing it in the elevated risk category. The domain resolves to IP 188.114.97.3 and was created on March 31, 2025. It appears on 1 security blocklist and is registered through NICENIC INTERNATIONAL GROUP CO., LIMITED. The SSL certificate is issued by Google Trust Services, which may lend false legitimacy to unsuspecting users. MetaMask has already blocked access to this domain, indicating prior detection by security infrastructure.  To mitigate exposure to kraken59.cc, users should verify all Kraken-related links against official sources and avoid clicking unsolicited links. Organizations should block the domain and IP at the network perimeter. Cryptocurrency users are advised to use hardware wallets and enable multi-factor authentication on all accounts. Always cross-check domains with known legitimate Kraken endpoints to prevent credential theft and financial loss.

## Threat Details
- Verdict: MALICIOUS
- Site status: unknown (HTTP ?)
- Target brand: Kraken

## Domain Intelligence
- Registered: 2025-03-31 13:39:52
- Registrar: NICENIC INTERNATIONAL GROUP CO., LIMITED
- IP: 188.114.97.3

## Detection Status
- VirusTotal: 11 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 1 hits
  Lists: ["MetaMask"]

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/7d3c100e-f21b-45ee-bacd-a39381b2def2
- PhishDestroy: https://phishdestroy.io/domain/kraken59.cc/
- LLM endpoint: https://phishdestroy.io/domain/kraken59.cc/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/kraken59.cc/
Last updated: 2026-03-28