kraken5[.]cc

PhishDestroy identifies kraken5.cc as an active brand-impersonation domain targeting users of the Kraken cryptocurrency exchange. This site is designed to mimic the legitimate kraken.com interface in order to harvest login credentials, 2FA codes, and other sensitive account details. Victims who enter their email and password on this fake portal risk immediate unauthorized access to their Kraken accounts, which can be drained of cryptocurrency or used in follow-on identity theft. Do not trust any login prompts that appear on kraken5.cc.

This domain was flagged by PhishDestroy after analysis revealed it was registered on December 13, 2024, and currently resolves to IP address 86.54.25.38. As of today, it remains undetected by VirusTotal with a score of 1 out of 95 security engines. The domain is registered through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar often associated with short-lived malicious domains used in phishing campaigns. The page title on the site is identical to the domain name, which is a common tactic to avoid detection by reputation filters.

If you visited kraken5.cc, do not enter any login details or personal information. Immediately change your Kraken account password using the official kraken.com website or mobile app, and enable two-factor authentication if not already enabled. Scan your device for malware using reputable antivirus software, as many phishing sites also distribute info-stealing trojans. Report the domain to Kraken’s abuse team and file a complaint with your local cybercrime unit. Forward any suspicious emails to Kraken’s phishing inbox at phish@kraken.com. Always verify the URL and SSL certificate before entering credentials, and use a password manager to avoid fake login forms.