kraken--tor[.]info

This domain, kraken--tor.info, was registered through Dynadot Inc on April 27, 2026 and is currently resolved to the Cloudflare IP address 188.114.96.3 (AS13335, United States). The authoritative nameservers are dax.ns.cloudflare.com and magdalena.ns.cloudflare.com, indicating the use of Cloudflare’s DNS service. The site presents an HTTPS certificate issued by Let’s Encrypt (certificate identifier E7) and returns HTTP 200 responses. Gridinsoft assigns a trust score of 0/100, and VirusTotal reports a single detection out of 91 scanned security vendors, confirming that at least one vendor flagged the domain as malicious. The page title observed is “Официальные зеркала Kraken Onion: актуальные ссылки slon6 cc”, and the brand target is explicitly listed as Kraken, classifying the activity as a high‑risk brand‑impersonation campaign. The domain is presently listed on one security blocklist and has been blocked by the PhishDestroy mitigation service. While the exact page content has not been publicly disclosed, the combination of a brand‑specific title, low trust score, and detection by security vendors indicates a deliberate attempt to lure Kraken users. Defenders should add kraken--tor.info to URL filtering and DNS block lists, monitor outbound traffic for connections to the associated Cloudflare IP, and enforce multi‑factor authentication for Kraken accounts to mitigate credential‑theft risk. Continuous threat‑intel feeds should be consulted for any emerging indicators tied to this infrastructure.