kraken3yvbvzmhytnrnuhsy772i6dfobofu652e27f5hx6y5cpj7rgyd-onion[.]org

The domain kraken3yvbvzmhytnrnuhsy772i6dfobofu652e27f5hx6y5cpj7rgyd-onion.org is a fake exchange site that mimics Kraken, a well-known cryptocurrency exchange. It is currently taken down, but at its peak, it was flagged by 1 out of 94 vendors on VirusTotal, indicating limited detection. The domain was registered through Gname 398 Inc and hosted on an IP managed by CloudFlare, Inc., located in Canada.

This phishing domain aimed to deceive users into believing they were accessing the legitimate Kraken platform. By leveraging the trusted Let's Encrypt SSL certificate, the site likely appeared secure to unsuspecting visitors. The use of a complex and seemingly random domain name is a common tactic to evade detection and confuse users.

Despite its takedown, the domain highlights the ongoing threat of fake exchange sites within the cryptocurrency sector. PhishDestroy's inclusion of this domain in public blocklists underscores the importance of early detection in mitigating phishing threats. The limited VirusTotal detection count reflects the freshness of the threat, as phishing domains often exploit the gap between registration and antivirus database updates.