ssylka-na-kraken[.]cc

This domain, ssylka-na-kraken.cc, is identified as a brand impersonation threat targeting the cryptocurrency exchange Kraken. Analysis indicates the site employs deceptive branding elements, including a localized page title in Russian, 'KRA - всегда свежие продукты в нашем маркете,' which does not align with the legitimate services of the targeted platform. The domain exhibits characteristics consistent with phishing infrastructure designed to mislead users into divulging sensitive credentials or financial information under false pretenses.

Infrastructure analysis reveals the domain was registered on February 21, 2026, through NiceNIC International Group Co., Limited, a registrar frequently associated with high-risk domains. It resolves to the IP address 193.124.113.223, located within the Russian Federation under autonomous system AS48347 (JSC Mediasoft ekspert). At the time of assessment, the domain appeared on a single security blocklist and was flagged by 14 out of 95 security vendors on VirusTotal, indicating moderate detection coverage. Notably, the domain lacks an SSL certificate, a common red flag for fraudulent sites, and was actively blocked by at least one threat intelligence feed prior to takedown.

As of the latest verification, ssylka-na-kraken.cc has been taken offline, likely in response to abuse reports or automated mitigation efforts. However, the residual risk remains elevated due to the domain's recent registration, association with a known phishing campaign, and the potential for re-emergence under a similar or altered infrastructure. Users and organizations are advised to monitor for related domains, particularly those mimicking cryptocurrency platforms, and to implement real-time threat intelligence feeds to detect and block such impersonation attempts. Additional precautions include verifying SSL certificates, scrutinizing domain registration dates, and cross-referencing detected IPs against known malicious ranges.