# krakeonion.cc — SUSPICIOUS

> krakeonion.cc is linked to credential harvesting phishing targeting user logins. Flagged by 4 of 95 scanners. Check the full report.

## Summary
krakeonion.cc is actively engaged in credential harvesting phishing campaigns aimed at stealing sensitive user login information. This specific threat involves deceptive tactics to trick users into submitting credentials to fake login pages, putting victims at risk of unauthorized access and data theft.

The domain was created recently on October 16, 2025, and is registered through NICENIC INTERNATIONAL GROUP CO., LIMITED. It resolves to the IP address 172.67.217.14 and holds an SSL certificate issued by Google Trust Services, which may give it a false sense of legitimacy. VirusTotal analysis flags krakeonion.cc by 4 out of 95 security vendors, confirming its malicious nature. Currently, it maintains an elevated risk status and remains active in blocklists.

Users who have visited krakeonion.cc or interacted with its content should immediately change their passwords for any accounts that may have been compromised. It is also advisable to enable multi-factor authentication where possible and monitor accounts for suspicious activity. Avoid clicking links or entering credentials on unfamiliar or untrusted domains to mitigate future risks associated with credential harvesting threats.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2025-10-16 15:26:54
- Registrar: NICENIC INTERNATIONAL GROUP CO., LIMITED
- IP: 172.67.217.14

## Detection Status
- VirusTotal: 4 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/1d346357-1f8b-4153-9297-694c297e7c8a
- PhishDestroy: https://phishdestroy.io/domain/krakeonion.cc/
- LLM endpoint: https://phishdestroy.io/domain/krakeonion.cc/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/krakeonion.cc/
Last updated: 2026-03-28