# ww16.kraken10.co — SUSPICIOUS

> ww16.kraken10.co impersonates Kraken with 0/95 VirusTotal detections. Avoid this phishing domain that poses as the crypto exchange, resolving to IP 64.190.63.

## Summary
PhishDestroy identifies ww16.kraken10.co as an active brand impersonation threat under investigation. This domain mimics Kraken, a prominent cryptocurrency exchange, with the intent to deceive users into surrendering sensitive credentials or digital assets. While no drainer kit has been directly observed at this stage, the domain’s structure and naming convention strongly suggest a phishing operation targeting Kraken’s user base. The threat actor likely leverages social engineering tactics, such as spoofed emails or fake support links, to lure victims to the fraudulent site.  

This domain was flagged with the following technical indicators: it currently shows 0 out of 95 detections on VirusTotal, indicating a low immediate detection rate. Registered through Above.com Pty Ltd., the domain resolves to IP address 64.190.63.136. The SSL certificate was issued by DigiCert Inc, and the domain was created on May 24, 2025. As of the latest assessment, Google Safe Browsing (GSB) has not flagged the domain, and no blocklist entries have been recorded. These attributes suggest a recently deployed and potentially low-profile threat.  

The domain remains active and is considered a high-priority investigative target due to its clear intent to impersonate a well-known brand. No active takedown efforts have been confirmed, leaving the risk of continued user exposure elevated. Users are strongly advised to avoid accessing ww16.kraken10.co or any subpages under kraken10.co. Organizations should add the domain and its associated IP to network blocklists and monitor for inbound or outbound connections. Additionally, users of Kraken or similar services should verify URLs carefully, enable multi-factor authentication, and report suspicious communications. The remaining risk is assessed as moderate-to-high pending further forensic analysis and potential takedown actions.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)
- Target brand: Kraken

## Domain Intelligence
- Registered: 2025-05-24 15:58:37
- Registrar: Above.com Pty Ltd.
- IP: 64.190.63.136

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/d42c9411-b8ac-4251-a785-ed78349cc855
- PhishDestroy: https://phishdestroy.io/domain/ww16.kraken10.co/
- LLM endpoint: https://phishdestroy.io/domain/ww16.kraken10.co/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/ww16.kraken10.co/
Last updated: 2026-03-28