# kraken-darkweb.cc — MALICIOUS > PhishDestroy identifies kraken-darkweb.cc impersonating Kraken to steal credentials; 14/95 VirusTotal vendors flag this active domain. ## Summary PhishDestroy identifies kraken-darkweb.cc as an active brand impersonation domain targeting Kraken users for credential theft and potential financial fraud. This domain (kraken-darkweb.cc) was flagged by 14 out of 95 VirusTotal security vendors, raising elevated concerns over its malicious intent. It resolves to IP 104.21.86.118 and is registered through Gname.com Pte. Ltd. While the exact registration date is unavailable, the domain’s recent detection and high detection rate suggest a newly established or recently activated threat. No current presence on major blocklists was observed during analysis, though its low trust score and association with fraudulent activity warrant immediate attention. Brand impersonation domains like kraken-darkweb.cc mimic legitimate cryptocurrency exchange interfaces to deceive users into entering login credentials or payment details. Given its recent activity and partial detection coverage, the risk of successful compromise remains elevated, particularly for users accessing Kraken through unsanctioned channels. Organizations should block this domain at the DNS and firewall levels, update internal threat intelligence feeds, and issue user advisories to avoid interactions. End users encountering this domain should report it immediately and avoid entering any credentials or financial information. ## Threat Details - Verdict: MALICIOUS - Site status: unknown (HTTP ?) - Target brand: Kraken ## Domain Intelligence - Registrar: Gname.com Pte. Ltd. - IP: 104.21.86.118 ## Detection Status - VirusTotal: 14 vendors flagged - Google Safe Browsing: clean - Blocklists: 0 hits ## Evidence - PhishDestroy: https://phishdestroy.io/domain/kraken-darkweb.cc/ - LLM endpoint: https://phishdestroy.io/domain/kraken-darkweb.cc/llm.txt ## If You Visited This Site 1. Change any passwords you may have entered 2. Enable 2FA on all related accounts 3. Monitor your accounts for unauthorized activity 4. Report to: FBI IC3, Europol, local authorities --- Report by PhishDestroy | https://phishdestroy.io/domain/kraken-darkweb.cc/ Last updated: 2026-03-26