# url-kraken.com — SUSPICIOUS

> url-kraken.com posed as Kraken to deceive users. This low-risk phishing site is now offline, but caution is advised to avoid similar scams.

## Summary
PhishDestroy has identified url-kraken.com as a malicious domain impersonating the well-known Kraken brand. This site was designed to mimic Kraken’s marketplace, using Cyrillic script in its page title to appeal to a specific user base. Despite its low-risk classification and limited detection by security vendors, url-kraken.com was flagged for social engineering tactics, which can mislead users into divulging sensitive information or engaging in fraudulent activity.

The phishing attempt worked by presenting a fake Kraken-branded marketplace, likely to lure unsuspecting visitors into thinking they were accessing the official platform. The domain was registered through NiceNIC International Group Co., Limited and resolved to an IP address commonly associated with content delivery networks. Although only two out of 95 VirusTotal scanners flagged the domain, its inclusion on multiple security blocklists and Google Safe Browsing warnings indicates a genuine threat of social engineering.

Users who may have visited url-kraken.com should remain vigilant for any suspicious communications or requests linked to Kraken. It is recommended to run updated antivirus scans and refrain from entering any personal or financial data on suspicious sites. Additionally, changing passwords associated with Kraken accounts and monitoring for unauthorized activity can help mitigate potential risks. Since the domain is currently offline, the immediate threat is reduced, but awareness remains crucial to avoid similar future scams.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: dead (HTTP 403)
- Target brand: Kraken
- Page title: Kraken Маркетплейс | Кракен Маркет | Официальный Kraken URL

## Domain Intelligence
- Registered: 2026-03-08 13:07:01
- Registrar: NiceNIC International Group Co., Limited
- Country: HK
- IP: 104.21.2.151
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: ["celine.ns.cloudflare.com", "neil.ns.cloudflare.com"]
- SSL Issuer: none

## Detection Status
- VirusTotal: 2 vendors flagged
  Vendors: ["Google Safebrowsing", "Lionic"]
- Google Safe Browsing: FLAGGED
- Blocklists: 2 hits
  Lists: ["PhishDestroy", "MetaMask"]

## Evidence
- Screenshot: https://i.ibb.co/JWVpNsVr/95ed60fd21f1.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/19ec81d9-318f-4f3b-8168-a588670490e1
- Wayback Machine: https://web.archive.org/web/https://url-kraken.com
- PhishDestroy: https://phishdestroy.io/domain/url-kraken.com/
- LLM endpoint: https://phishdestroy.io/domain/url-kraken.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/url-kraken.com/
Last updated: 2026-03-19