krakeonion[.]cc

krakeonion.cc is actively engaged in credential harvesting phishing campaigns aimed at stealing sensitive user login information. This specific threat involves deceptive tactics to trick users into submitting credentials to fake login pages, putting victims at risk of unauthorized access and data theft.

The domain was created recently on October 16, 2025, and is registered through NICENIC INTERNATIONAL GROUP CO., LIMITED. It resolves to the IP address 172.67.217.14 and holds an SSL certificate issued by Google Trust Services, which may give it a false sense of legitimacy. VirusTotal analysis flags krakeonion.cc by 4 out of 95 security vendors, confirming its malicious nature. Currently, it maintains an elevated risk status and remains active in blocklists.

Users who have visited krakeonion.cc or interacted with its content should immediately change their passwords for any accounts that may have been compromised. It is also advisable to enable multi-factor authentication where possible and monitor accounts for suspicious activity. Avoid clicking links or entering credentials on unfamiliar or untrusted domains to mitigate future risks associated with credential harvesting threats.