kraken4[.]cc

This domain, kraken4.cc, represents a targeted brand impersonation campaign designed to deceive users of the Kraken cryptocurrency exchange platform. Analysis indicates the site mimics legitimate Kraken login and trading interfaces to harvest user credentials, payment details, and private keys. The fraudulent nature of this domain extends to potential distribution of malware under the guise of wallet software or trading tools, posing significant financial and operational risks to victims. Infrastructure analysis reveals multiple technical indicators supporting the malicious classification of kraken4.cc. The domain was registered on March 29, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar frequently associated with high-risk domains. Security vendor detection on VirusTotal stands at 13 out of 95, with two prominent blocklists—PhishDestroy and OISD—actively blocking access. The domain resolves to the IP address 86.54.25.38, which has been linked to previous phishing infrastructure. Additionally, the site employs a Let's Encrypt SSL certificate, a tactic commonly used by threat actors to create a false sense of security for visitors. Users who have interacted with kraken4.cc should immediately revoke any credentials entered on the site and enable multi-factor authentication on their legitimate Kraken accounts. All connected devices should undergo a comprehensive security scan to detect potential malware infections. Financial transactions conducted during the suspected compromise period should be reviewed for unauthorized activity, and affected parties are advised to report the incident to relevant cybersecurity authorities. Given the elevated risk level, organizations should update their blocklists to include this domain and its associated IP address to prevent further exposure.