# kraken-ssylka-darknet.com — SUSPICIOUS

> kraken-ssylka-darknet.com is under investigation for phishing risks. Stay alert and avoid sharing personal info on suspicious sites.

## Summary
PhishDestroy identifies kraken-ssylka-darknet.com as a potentially malicious domain involved in generic phishing attempts. While it currently evades detection by antivirus engines, its recent registration and suspicious naming pattern raise concerns warranting close monitoring.

This domain was created on March 5, 2026, and resolves to IP address 104.21.45.66. Registered via NICENIC INTERNATIONAL GROUP CO., LIMITED, it has no current detections across VirusTotal's 95 vendor engines, suggesting it may be newly established to evade defenses or still in early campaign stages. The infrastructure points to a deliberate setup aimed at deception.

Users should exercise caution by not interacting with unsolicited links or entering credentials on sites linked to kraken-ssylka-darknet.com. Organizations are advised to monitor network traffic for communications with this domain and implement appropriate email and web filtering to reduce phishing risks. Staying vigilant remains crucial until further intelligence clarifies its intent.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: dead (HTTP 403)
- Target brand: Kraken
- Page title: Captcha

## Domain Intelligence
- Registered: 2026-03-05 15:07:02
- Registrar: NiceNIC International Group Co., Limited
- Country: HK
- IP: 104.21.45.66
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: ["donovan.ns.cloudflare.com", "etta.ns.cloudflare.com"]
- SSL Issuer: none

## Detection Status
- VirusTotal: 1 vendors flagged
  Vendors: ["SOCRadar"]
- Google Safe Browsing: clean
- Blocklists: 2 hits
  Lists: ["PhishDestroy", "MetaMask"]

## Evidence
- Screenshot: https://i.ibb.co/1GMmRZH0/b171405f2270.png
- Cloudflare Radar: https://radar.cloudflare.com/domains/kraken-ssylka-darknet.com
- Wayback Machine: https://web.archive.org/web/https://kraken-ssylka-darknet.com
- PhishDestroy: https://phishdestroy.io/domain/kraken-ssylka-darknet.com/
- LLM endpoint: https://phishdestroy.io/domain/kraken-ssylka-darknet.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/kraken-ssylka-darknet.com/
Last updated: 2026-03-19