krakenlinks[.]cc

PhishDestroy identifies krakenlinks.cc as an active domain engaged in brand impersonation targeting Kraken users, posing an elevated risk to cryptocurrency traders and investors. The site masquerades as the legitimate Kraken exchange to harvest login credentials, exposing victims to direct financial theft and account compromise. The threat is immediate and ongoing, with the domain luring users through spoofed emails, fake ads, or social engineering tactics that leverage the trusted Kraken brand. This domain was flagged by 10 out of 95 security vendors on VirusTotal, indicating widespread detection but not universal blocklisting. It is registered through NICENIC INTERNATIONAL GROUP CO., LIMITED and resolves to IP address 86.54.25.38. The domain krakenlinks.cc was created on March 12, 2025, with the page title also set to krakenlinks.cc, confirming active impersonation. Its recent registration date and low trust score (despite partial VT detection) suggest a hastily deployed campaign with high potential for success among unsuspecting users seeking quick access to Kraken’s services. To mitigate risk, users should avoid visiting krakenlinks.cc entirely and verify all links before clicking. Confirm domain spellings carefully—legitimate Kraken domains include kraken.com and krakenexchange.com. Enable two-factor authentication (2FA) on all Kraken accounts and report suspicious communications directly to Kraken’s support team. Network administrators should block access to 86.54.25.38 and krakenlinks.cc at the firewall or DNS level. Always cross-check URLs using official Kraken communication channels.