krakenweb-market[.]cc

PhishDestroy identifies krakenweb-market.cc as an active brand impersonation phishing site targeting Kraken users. The domain was registered on March 13, 2025, and already shows signs of malicious activity, having been detected by 14 of 95 security vendors on VirusTotal. It is also flagged in 1 public blocklist and blocked by MetaMask for potential risks. The domain resolves to IP address 86.54.25.38 and is registered through NICENIC INTERNATIONAL GROUP CO., LIMITED. This domain poses a significant risk to users as it attempts to mimic the legitimate Kraken cryptocurrency exchange site to trick visitors into entering sensitive login credentials or payment information. The fraudulent domain was created recently, highlighting an opportunistic campaign to exploit trust in the Kraken brand during a time when users may not be familiar with new or lookalike domains. Despite its recent creation, krakenweb-market.cc has already gained attention from the security community due to its malicious intent. If you visited krakenweb-market.cc, immediately check your accounts connected to Kraken for any unauthorized activity and change your passwords. If you entered any credentials or payment information, contact Kraken’s support team immediately and consider enabling two-factor authentication on your legitimate Kraken account. Use a reputable antivirus tool to scan your device for malware and avoid accessing your accounts from this domain or any related links in the future.