krakenmarketplace[.]cc

PhishDestroy identifies krakenmarketplace.cc as an active brand impersonation domain targeting the Kraken cryptocurrency exchange. This fraudulent site attempts to deceive users by mimicking Kraken’s branding and marketplace functionality, likely aiming to harvest credentials or facilitate financial fraud. The threat type has been classified as elevated due to its active status and the presence of multiple red flags, including a high VirusTotal detection rate and recent domain creation. krakenmarketplace.cc was registered on May 23, 2025, through NICENIC INTERNATIONAL GROUP CO., LIMITED, and resolves to the IP address 172.67.202.61. The domain holds a Google Trust Services SSL certificate, which may lend it an air of legitimacy to unsuspecting users. VirusTotal reports a detection rate of 10 out of 95 security vendors, indicating partial recognition of its malicious nature. While the domain is not currently flagged by Google Safe Browsing (GSB), its short operational history and the registrar’s association with high-risk domains warrant caution. The combination of these technical indicators suggests an opportunistic campaign leveraging the Kraken brand to capitalize on user trust. As of the latest analysis, krakenmarketplace.cc remains active and has not been globally blocked by major threat intelligence platforms. PhishDestroy recommends immediate avoidance of this domain and advises users who may have interacted with it to revoke any shared credentials, enable multi-factor authentication on legitimate Kraken accounts, and scan their devices for malware. Organizations should consider blocking the domain at the network level and reporting it to relevant authorities. Despite its current status, the risk remains elevated due to the domain’s recent creation and the potential for rapid escalation in fraudulent activities. Proactive monitoring and user education are critical to mitigating the impact of this impersonation campaign.