krakensongs[.]cc

PhishDestroy identifies krakensongs.cc as an active crypto drainer impersonating the legitimate Kraken brand, a major cryptocurrency exchange. This domain is specifically designed to deceive users into connecting crypto wallets or entering credentials under the false pretense of accessing Kraken-related content or services. The threat is elevated due to its active deployment, SSL certification, and partial evasion of initial detection mechanisms, making it a significant risk to cryptocurrency users seeking legitimate Kraken services. This domain was flagged by PhishDestroy after thorough analysis revealed multiple red flags. VirusTotal analysis shows 5 out of 95 security vendors flagged this domain as malicious, indicating partial but not universal detection. The domain was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED on July 02, 2025, a very recent creation date suggesting a hastily deployed operation. It resolves to IP address 188.114.97.3 and is already blocked by one security blocklist, though it remains accessible to unsuspecting users. The domain employs Google Trust Services for its SSL certificate, a tactic often used to lend false legitimacy to phishing sites. Users who have visited krakensongs.cc should immediately cease any interaction with the site and disconnect any connected wallets or devices. If credentials or wallet information were entered, users must revoke wallet permissions and change passwords on all critical accounts immediately. PhishDestroy recommends running a malware scan on affected devices and monitoring for unauthorized transactions. Users are advised to verify domain legitimacy through PhishDestroy’s blocklist before engaging with any Kraken-related or cryptocurrency services.