kraken-onion-ssilka[.]info

kraken-onion-ssilka.info is currently flagged for high-risk brand impersonation activity targeting Kraken, based on multiple sources of threat intelligence. The domain is active as of July 19, 2026, and is registered through Dynadot Inc. DNS records indicate the use of CloudFlare nameservers (kay.ns.cloudflare.com and amos.ns.cloudflare.com), with the domain resolving to IP address 188.114.97.3 located in Canada. The site presents a page titled 'Kraken зеркало безопасный вход darknet 2026 через onion tor,' which aligns with the known impersonation of the Kraken brand.

This domain has been identified in two AlienVault OTX threat intelligence pulses and appears on one security blocklist, specifically being blocked by PhishDestroy. VirusTotal data shows that one out of ninety-one security vendors has flagged this domain, further corroborating the risk. The presence of an SSL certificate issued by Let's Encrypt (YE1) does not mitigate the threat, as malicious domains often use valid certificates to appear legitimate.

The domain’s infrastructure and page title strongly suggest that it is being used for brand impersonation, likely attempting to deceive users seeking access to Kraken services, possibly in the context of darknet or onion routing. While the exact content and method of fraud are not fully analyzed, defenders should treat this domain as a credible threat. Immediate blocking and monitoring are advised for organizations and individuals at risk of Kraken-targeted phishing attempts. Continued observation is recommended, as the domain remains active and has not been neutralized as of the report date.