kraken-ssilka-darknet[.]info

This domain, kraken-ssilka-darknet.info, poses a brand impersonation threat specifically targeting users of the Kraken cryptocurrency exchange. Analysis of the page title, "Kraken зеркало безопасный вход darknet 2026 через onion tor," indicates an attempt to deceive users into believing they are accessing a legitimate Kraken mirror site, likely for credential theft or fraudulent transactions. The inclusion of terms like "darknet" and "onion tor" suggests an intent to exploit users seeking anonymized access, a common tactic to bypass security warnings and lower user vigilance. Evidence supporting the malicious nature of this domain includes detection by 15 out of 95 security vendors on VirusTotal, a Gridinsoft trust score of 0/100, and presence on one security blocklist. The domain was registered on March 28, 2026, through Dynadot Inc., and resolves to the IP address 188.114.96.3. Infrastructure analysis reveals the use of WordPress, MySQL, PHP, Yandex.Metrika, Cloudflare Browser Insights, and Cloudflare, with HTTP/3 support. The combination of these technologies is consistent with phishing sites designed to appear legitimate while evading detection. Users who visited kraken-ssilka-darknet.info should immediately revoke any sessions associated with the site, particularly those involving cryptocurrency wallets or exchange accounts. Credentials entered on the site should be considered compromised and changed across all platforms where they were reused. Monitoring for unauthorized transactions or account access is critical, especially for Kraken users. If financial or personal data was submitted, affected individuals should report the incident to relevant authorities and consider additional security measures such as enabling multi-factor authentication on all sensitive accounts.