krakendisput[.]cc

PhishDestroy identifies krakendisput.cc as an active brand-impersonation domain designed to harvest login credentials from users of Kraken, a major cryptocurrency exchange. This domain presents a high-elevated risk due to its malicious infrastructure and the presence of a crypto drainer payload. Users who interact with this site risk unauthorized access to their Kraken accounts and potential loss of digital assets. Immediate blocking and heightened scrutiny are recommended for any traffic to this domain or its associated IP address.

This domain was flagged by 5 out of 95 VirusTotal security vendors, indicating partial but not universal detection coverage. It resolves to IP address 172.67.169.123 and uses an SSL certificate issued by Google Trust Services, which may give a false sense of legitimacy. The domain was registered on July 07, 2025, through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar known for hosting numerous malicious domains. Its recent creation and active resolution suggest ongoing malicious intent. Despite the SSL certificate, the domain’s presence on blocklists and low detection rate underscore its dangerous nature.

To mitigate exposure, organizations and users should immediately block the domain krakendisput.cc and its associated IP 172.67.169.123 at the network firewall and DNS level. Users should avoid accessing this domain and verify any Kraken-related link using PhishDestroy’s real-time scanning tool. Additionally, enable multi-factor authentication (MFA) on Kraken accounts and educate users to recognize typosquatting and impersonation attempts. For further protection, monitor DNS logs for queries to this domain and investigate any successful connections as potential indicators of compromise.