kraken-darkweb[.]cc

PhishDestroy identifies kraken-darkweb.cc as an active brand impersonation domain targeting Kraken users for credential theft and potential financial fraud.

This domain (kraken-darkweb.cc) was flagged by 14 out of 95 VirusTotal security vendors, raising elevated concerns over its malicious intent. It resolves to IP 104.21.86.118 and is registered through Gname.com Pte. Ltd. While the exact registration date is unavailable, the domain’s recent detection and high detection rate suggest a newly established or recently activated threat. No current presence on major blocklists was observed during analysis, though its low trust score and association with fraudulent activity warrant immediate attention.

Brand impersonation domains like kraken-darkweb.cc mimic legitimate cryptocurrency exchange interfaces to deceive users into entering login credentials or payment details. Given its recent activity and partial detection coverage, the risk of successful compromise remains elevated, particularly for users accessing Kraken through unsanctioned channels. Organizations should block this domain at the DNS and firewall levels, update internal threat intelligence feeds, and issue user advisories to avoid interactions. End users encountering this domain should report it immediately and avoid entering any credentials or financial information.