slon-kraken[.]cc

The domain slon-kraken.cc is a high-risk brand impersonation threat, currently active, targeting users of the Kraken cryptocurrency exchange.

Analysis indicates that slon-kraken.cc was registered through Global Domain Group LLC on April 04, 2026. The domain resolves to the IP address 188.114.97.3, which is located in California and is associated with CloudFlare, Inc. The domain is flagged by 16 of 95 security vendors on VirusTotal, indicating a significant level of suspicious activity. Additionally, slon-kraken.cc appears on three security blocklists and is blocked by PhishDestroy, MetaMask, and SEAL. The SSL certificate for this domain is issued by Let's Encrypt with the serial number E7, which is a common practice for phishing sites to gain user trust.

Given the current status of the domain as active and the high risk level, it is recommended that Kraken users avoid interacting with slon-kraken.cc. Network administrators should consider adding this domain to their DNS blocklists to prevent access. Security teams should monitor for any related infrastructure and take proactive measures to mitigate potential brand impersonation attacks targeting Kraken users.