crab-5[.]cc

PhishDestroy has identified the domain crab-5.cc as a brand impersonation threat, specifically targeting the cryptocurrency exchange Kraken. This domain was registered through NiceNIC International Group Co., Limited and has been taken offline as of the current analysis. The page title was set to 'KRAKEN' in an attempt to deceive users into believing it was a legitimate Kraken platform.

Technical indicators for this domain are concerning: VirusTotal reports a detection ratio of 4 out of 95 security vendors flagging it as malicious. The domain resolves to IP address 188.114.97.3 and was created on February 21, 2026. It appears on 3 security blocklists, indicating that multiple threat intelligence sources have identified it as harmful. The SSL certificate was issued by Google Trust Services / WE1, which adds a layer of false legitimacy. Notably, Google Safe Browsing status is not explicitly provided, but the blocklist presence suggests it may have been flagged.

Currently, the domain is offline, likely due to takedown actions by authorities or the hosting provider. However, the risk remains as similar domains could appear. Users should verify any communications claiming to be from Kraken by checking official channels and avoid clicking on links from unsolicited emails or messages. PhishDestroy recommends using multi-factor authentication and monitoring accounts for suspicious activity. Always double-check the URL before entering credentials or sensitive information.