krakenssylka-darknetmarket[.]cc

The domain krakenssylka-darknetmarket.cc has been identified as a brand impersonation threat specifically targeting the Kraken marketplace. This domain was created on February 21, 2026, and its page title, 'Kraken маркетплейс — рабочая ссылка и зеркала 2026 | Вход без фишинга', misleadingly suggests it provides legitimate access to the Kraken platform while warning against phishing—an ironic attempt to build false trust. The domain is currently offline, but its registration through NiceNIC International Group Co., Limited and the use of a Let's Encrypt / R12 SSL certificate are common indicators of phishing infrastructure.

Technical analysis reveals that krakenssylka-darknetmarket.cc resolves to IP address 216.198.79.65. VirusTotal data shows 5 out of 95 security vendors flagging this domain as malicious, indicating moderate detection across the security community. The domain appears on 3 security blocklists and has been taken offline. These indicators, combined with the short time since creation, strongly suggest a coordinated phishing campaign aimed at capturing credentials or spreading malware under the guise of a trusted marketplace.

PhishDestroy assesses the risk as elevated due to the brand impersonation of a known darknet marketplace and the active targeting of users seeking access. Although the domain is now offline, the remaining risk includes potential redirects or new domains registered by the same threat actor. Users who may have visited this site should scan their devices for malware and change any credentials entered. Organizations should monitor for similar domains and block the associated IP address. Continued vigilance is recommended as these attacks often re-emerge under slightly different domain names.