krakenzone-web[.]cc

PhishDestroy identifies krakenzone-web.cc as an active brand impersonation site impersonating the legitimate Kraken cryptocurrency exchange. This domain poses a serious threat to users who may unknowingly interact with it, as it is designed to mimic Kraken’s branding to deceive visitors into connecting cryptocurrency wallets or entering sensitive credentials. Once connected, crypto drainer scripts could automatically transfer funds to attacker-controlled wallets without the victim’s consent. Given the domain’s focus on a major exchange, the risk of financial loss is elevated, particularly for users accustomed to Kraken’s interface or services. This domain was flagged by 5 out of 95 security vendors on VirusTotal, indicating widespread suspicion of malicious activity. The domain krakenzone-web.cc was registered on March 13, 2025, through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar known for hosting high-risk domains. It resolves to IP address 86.54.25.38, which has been associated with multiple phishing and malware campaigns targeting cryptocurrency users. The combination of a newly registered domain, low trust scores, and impersonation tactics strongly suggests this is a malicious campaign targeting Kraken users. If you visited krakenzone-web.cc, do not enter any credentials, connect your wallet, or interact with the page. Close the browser immediately. Check your wallet transaction history for unauthorized transfers. Use a reputable security tool to scan your device for malware. Avoid clicking any links from unsolicited messages or ads claiming to be from Kraken. Always verify URLs by typing them manually or using official Kraken links. Report the domain to your security team or local cybercrime unit if possible.