kraken-web[.]cc

PhishDestroy identifies kraken-web.cc as an active brand impersonation domain masquerading as Kraken, a leading cryptocurrency exchange. This domain (kraken-web.cc) specifically poses as a crypto drainer, designed to trick users into connecting wallets and approve malicious token transfers. The threat actor leverages the Kraken brand to build trust, redirecting victims to fraudulent login pages or fake deposit interfaces to steal cryptocurrency assets. Once connected, a crypto drainer script silently drains funds without user confirmation, often exploiting permissioned smart contracts. This domain is engineered for deception and financial theft, making it a high-risk threat to cryptocurrency users. This domain was flagged by 6 out of 95 security vendors on VirusTotal, indicating moderate detection but high confidence in its malicious intent. kraken-web.cc resolves to IP address 172.67.205.2 and utilizes a Google Trust Services SSL certificate to appear legitimate. The domain was created on June 13, 2025, and is registered through NICENIC INTERNATIONAL GROUP CO., LIMITED. These technical indicators—combined with impersonation of a major brand and recent registration—are consistent with fast-flux or bulletproof hosting tactics used by advanced phishing operators. The low domain age and immediate deployment of malicious infrastructure suggest this campaign is part of a coordinated, evolving threat. If you visited kraken-web.cc or entered any credentials, immediately disconnect your wallet using PhishDestroy’s de-permission tool and revoke any suspicious token approvals via tools like revoke.cash or Etherscan. Never reuse passwords across platforms, and verify URLs manually by typing the official domain (kraken.com). Report the domain to your wallet provider and local cybercrime unit. For ongoing protection, enable multi-factor authentication and monitor wallet activity for unauthorized transactions. PhishDestroy continues to monitor this domain and recommends users exercise extreme caution when encountering unsolicited links referencing Kraken.