krab8x[.]cc

This domain, krab8x.cc, is flagged as a confirmed brand impersonation phishing site targeting Kraken, a major cryptocurrency exchange. Analysis indicates the site was designed to deceive users into believing it was the official Kraken platform, as evidenced by the page title 'krab8.cc - Официальный сайт Kraken' (translated: Official Kraken Site). The domain does not appear to be associated with a known drainer kit but exhibits classic traits of cryptocurrency phishing, including the use of a lookalike domain name to exploit user trust in the targeted brand. Infrastructure analysis reveals several critical technical indicators. The domain was registered on March 28, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar frequently associated with high-risk domains. It resolved to the IP address 172.67.200.137, which is part of a content delivery network known for masking malicious infrastructure. At the time of assessment, only 2 out of 95 security vendors on VirusTotal flagged the domain, indicating limited initial detection. The domain appeared on one security blocklist and was assigned a Gridinsoft trust score of 0/100, further confirming its malicious nature. The SSL certificate was issued by Google Trust Services, a common tactic to lend false legitimacy to phishing sites. As of the latest assessment, krab8x.cc has been taken offline, likely in response to detection and blocking by security entities such as PhishDestroy. However, the elevated risk level persists due to the domain's recent activity and the potential for reemergence under a similar or altered infrastructure. Users who may have interacted with the site are advised to immediately revoke any credentials or wallet permissions granted, monitor for unauthorized transactions, and report the incident to the legitimate Kraken security team. Organizations should update their blocklists to include this domain and its associated IP address to prevent future access attempts.