# krakenweb-market.cc — MALICIOUS

> krakenweb-market.cc impersonates Kraken in an active brand phishing campaign. 14 security vendors flag this domain created March 13, 2025. Check the full report.

## Summary
PhishDestroy identifies krakenweb-market.cc as an active brand impersonation phishing site targeting Kraken users. The domain was registered on March 13, 2025, and already shows signs of malicious activity, having been detected by 14 of 95 security vendors on VirusTotal. It is also flagged in 1 public blocklist and blocked by MetaMask for potential risks. The domain resolves to IP address 86.54.25.38 and is registered through NICENIC INTERNATIONAL GROUP CO., LIMITED.  This domain poses a significant risk to users as it attempts to mimic the legitimate Kraken cryptocurrency exchange site to trick visitors into entering sensitive login credentials or payment information. The fraudulent domain was created recently, highlighting an opportunistic campaign to exploit trust in the Kraken brand during a time when users may not be familiar with new or lookalike domains. Despite its recent creation, krakenweb-market.cc has already gained attention from the security community due to its malicious intent.  If you visited krakenweb-market.cc, immediately check your accounts connected to Kraken for any unauthorized activity and change your passwords. If you entered any credentials or payment information, contact Kraken’s support team immediately and consider enabling two-factor authentication on your legitimate Kraken account. Use a reputable antivirus tool to scan your device for malware and avoid accessing your accounts from this domain or any related links in the future.

## Threat Details
- Verdict: MALICIOUS
- Site status: unknown (HTTP ?)
- Target brand: Kraken
- Page title: krakenweb-market.cc

## Domain Intelligence
- Registered: 2025-03-13 16:20:49
- Registrar: NICENIC INTERNATIONAL GROUP CO., LIMITED
- IP: 86.54.25.38

## Detection Status
- VirusTotal: 14 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 1 hits
  Lists: ["MetaMask"]

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/9389b3cb-c32e-4de6-8ba3-3629073aa6f4
- PhishDestroy: https://phishdestroy.io/domain/krakenweb-market.cc/
- LLM endpoint: https://phishdestroy.io/domain/krakenweb-market.cc/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/krakenweb-market.cc/
Last updated: 2026-03-28