ssilka-kraken[.]cyou
“Кракен форум”
ssilka-kraken.cyou — Contenu indisponible (HTTP 502). Usurpation de l'identité de la marque : Kraken; Type d'arnaque : Crypto Scam. Résumé des preuves: VirusTotal 16/95 (ADMINUSLabs, ChainPatrol, alphaMountain.ai, BitDefender, CRDF); PhishDestroy score 95/100. Bureau d’enregistrement: Web Commerce Communica….
L’analyse détaillée de PhishDestroy AI reste en anglais afin de préserver le relevé forensique original.
The domain ssilka-kraken.cyou has been identified as a brand impersonation threat specifically targeting the cryptocurrency exchange Kraken. As of the latest assessment, the domain is offline, but its recent activity posed a significant risk to users seeking legitimate Kraken services. The site's title, "Кракен форум," is a clear attempt to mimic the Kraken brand in Russian, likely to deceive users into sharing sensitive information or connecting their crypto wallets.
This domain was registered on December 4, 2025, through Web Commerce Communications Limited and resolves to IP address 212.34.140.251. It appears on one security blocklist and is flagged by 16 out of 95 VirusTotal vendors, indicating a moderate to high level of malicious consensus among security engines. Notably, the domain lacks an SSL certificate, which is a red flag for any legitimate financial service. The domain's registration through a privacy-oriented registrar and its short lifespan further suggest malicious intent.
Given that the domain is currently offline, the immediate risk is reduced, but users should remain vigilant. PhishDestroy recommends that anyone who may have visited ssilka-kraken.cyou or entered credentials there should change their Kraken passwords immediately and enable two-factor authentication. Always verify the official Kraken website URL (kraken.com) before logging in or sharing personal information. Avoid clicking on links from unsolicited messages or search results that direct to similar domains.
Processus de réponse aux menaces Pipeline
Statut de la liste de blocage publique
Capture enregistrée
Informations sur les domaines
Détails techniquesDNS, SAN SSL, horodatages
ZONE SHORTDOT · PREUVES PUBLIQUES
.cyou
ShortDot zone evidence
ShortDot zone evidence
The linked repository preserves daily zone observations across seven ShortDot-operated TLDs, including registration volume and abuse-related indicators. This registry context is supporting background and is not an independent detection for the domain in this report.
ICANN OVERSIGHT
Contexte de l’accréditation et du RAA
Contexte de l’accréditation et du RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Analyse VirusTotal
Données factuelles et rapports externes
Ce site vous a-t-il affecté ?
Si vous avez saisi des informations d'identification de compte, des informations personnelles ou de paiement, ou téléchargé un fichier à partir de ce domaine, agissez immédiatement. Vous trouverez ci-dessous des ressources pour vous aider à signaler l'incident et à vous protéger.
Signalez-le à vos autorités locales
Sélectionnez votre pays pour obtenir contacts officiels en matière de cybercriminalité ou créer un projet de plainte →.
Vérifier n'importe quel domaine
Analyse des menaces à l'aide de listes de blocage stockées, de WHOIS, de DNS et de preuves d'analyse publique
Scanner maintenantSignaler une tentative d'hameçonnage
Signalez les domaines suspects à notre base de données des menaces — protégez la communauté
SignalerFlux d'alertes en temps réel
Rapports de phishing récents et changements de disponibilité observés
SurveillerRestez informés, restez en sécurité
Surveillez les menaces en temps réel ou signalez cette alerte si vous pensez qu'il s'agit d'un faux positif