kraken59[.]cc

PhishDestroy identifies kraken59.cc as an active domain engaged in brand impersonation targeting Kraken users. The threat level is elevated due to the combination of recent domain registration, low trust scores, and direct impersonation tactics. This campaign poses a credible risk to cryptocurrency users seeking legitimate Kraken services. This domain was flagged with 11 out of 95 security vendors on VirusTotal, placing it in the elevated risk category. The domain resolves to IP 188.114.97.3 and was created on March 31, 2025. It appears on 1 security blocklist and is registered through NICENIC INTERNATIONAL GROUP CO., LIMITED. The SSL certificate is issued by Google Trust Services, which may lend false legitimacy to unsuspecting users. MetaMask has already blocked access to this domain, indicating prior detection by security infrastructure. To mitigate exposure to kraken59.cc, users should verify all Kraken-related links against official sources and avoid clicking unsolicited links. Organizations should block the domain and IP at the network perimeter. Cryptocurrency users are advised to use hardware wallets and enable multi-factor authentication on all accounts. Always cross-check domains with known legitimate Kraken endpoints to prevent credential theft and financial loss.