# krakenvhod2026.cc — MALICIOUS

> krakenvhod2026.cc is a Kraken brand impersonation phishing site flagged by 7 of 95 VirusTotal vendors. Check the full report.

## Summary
PhishDestroy identifies krakenvhod2026.cc as an active domain engaged in fraudulent brand impersonation targeting Kraken cryptocurrency exchange users.  

The domain krakenvhod2026.cc is currently hosting a phishing site that impersonates Kraken’s official marketplace, as confirmed by the page title referencing "Kraken маркетплейс 2026" and the inclusion of terms such as "рабочие зеркала" (working mirrors) and "Tor" (likely indicating an onion service redirect). This domain was created on March 24, 2026, and is registered through NICENIC INTERNATIONAL GROUP CO., LIMITED. The site resolves to IP address 64.29.17.65 and utilizes a Let's Encrypt SSL certificate to appear legitimate. Security intelligence shows that 7 out of 95 VirusTotal security vendors flag this domain, and it is also flagged by Google Safe Browsing under the SOCIAL_ENGINEERING category. The domain’s recent registration date, combined with the use of social engineering tactics, elevates its risk profile and suggests a coordinated effort to deceive users seeking access to Kraken’s platform.  

Given the elevated risk and confirmed malicious intent, krakenvhod2026.cc should be treated as a high-priority threat. Users who encounter this domain are advised to avoid interaction and report it to Kraken’s official fraud reporting channels. Organizations should block access to this domain at the network level using DNS filtering or firewall rules. Additionally, security teams are encouraged to monitor for similar domains leveraging Kraken’s branding, particularly those registered with NICENIC INTERNATIONAL GROUP CO., LIMITED or using recent creation dates. Proactive threat intelligence sharing and user education on identifying phishing attempts remain critical to mitigating risks associated with brand impersonation schemes.

## Threat Details
- Verdict: MALICIOUS
- Site status: unknown (HTTP ?)
- Target brand: Kraken
- Page title: Kraken маркетплейс 2026 — krslon5.cc, рабочие зеркала, Tor | Безопасный вход

## Domain Intelligence
- Registered: 2026-03-24 13:49:28
- Registrar: NICENIC INTERNATIONAL GROUP CO., LIMITED
- IP: 64.29.17.65

## Detection Status
- VirusTotal: 7 vendors flagged
- Google Safe Browsing: FLAGGED
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/1363cc44-7bd9-4627-b230-dcc2babdb414
- PhishDestroy: https://phishdestroy.io/domain/krakenvhod2026.cc/
- LLM endpoint: https://phishdestroy.io/domain/krakenvhod2026.cc/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/krakenvhod2026.cc/
Last updated: 2026-03-25