kraken20[.]cc

This domain, kraken20.cc, is identified as a brand-impersonation threat specifically targeting Kraken, a cryptocurrency exchange platform. The site is designed to deceive users into believing it is the legitimate Kraken platform, potentially leading to unauthorized access to sensitive account credentials, financial data, or cryptocurrency assets. Analysis indicates this is a deliberate attempt to exploit trust in the Kraken brand for malicious purposes. Infrastructure analysis reveals the domain was registered on March 29, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED. Security vendor assessments show that 12 of 95 engines on VirusTotal flag this domain as malicious, indicating a consensus among multiple detection systems regarding its fraudulent nature. The domain appears on one security blocklist, further corroborating its association with phishing or impersonation activity. No associated IP addresses or hosting providers were provided in the available data, but the registration details and vendor detections align with known patterns of brand-impersonation campaigns. As of the latest verification, kraken20.cc has been taken offline, reducing immediate exposure to users. However, the domain remains a documented threat due to its recent activity and registration details. Organizations and individuals are advised to block this domain at the network level and monitor for any re-activation or similar domains registered through the same registrar. Users who may have interacted with this domain should immediately reset their Kraken account credentials and enable multi-factor authentication. Security teams should treat any future domains registered under the same entity with elevated scrutiny, as they may indicate continued malicious activity.