kraken[.]cc

This domain, kraken.cc, is flagged for brand impersonation, specifically targeting the cryptocurrency exchange Kraken. The domain does not appear to be associated with any specific drainer kit or malware payload, but it is designed to deceive users into divulging sensitive information or performing actions that could compromise their accounts.

Infrastructure analysis reveals that the domain has been flagged by 15 out of 95 security vendors on VirusTotal, indicating a moderate level of detection. The domain is registered through NICENIC INTERNATIONAL GROUP CO., LIMITED, and it was created on March 29, 2026. The domain appears on one known security blocklist and has been taken offline as of the current assessment. While the domain is offline, it remains a potential threat due to its history of impersonation and the elevated risk level associated with it.

Currently, the domain is offline, which reduces the immediate risk but does not eliminate the potential for future reactivation. Response actions should include ongoing monitoring of the domain to detect any signs of reactivation or similar infrastructure. Users should be advised to avoid clicking on links from untrusted sources and to verify the URL of any Kraken-related login pages or transactions. Organizations should ensure that their security policies are updated to include this domain in their threat intelligence feeds and blocklists.