kraken3yvbvzmhytnrnuhsy772i6dfobofu652e27f5hx6y5cpj7rgydd[.]com
“kraken4qzqnoi7ogpzpzwrxk7mw53n5i56loydwiyonu4owxsh4g67yd.onion зеркало вход”
kraken3yvbvzmhytnrnuhsy772i6dfobofu652e27f5hx6y5cpj7rgydd.com — Belum terverifikasi. Peniruan identitas merek: Kraken; Jenis penipuan: Brand Impersonation. Ringkasan bukti: VirusTotal 13/91 (alphaMountain.ai, BitDefender, ESET, Forcepoint ThreatSeeker, Fortinet); URLQuery 1 alert; Spamhaus DBL_PHISH; PhishDestroy score 93/100. Registrar: NiceNIC.
Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.
PhishDestroy identifies kraken3yvbvzmhytnrnuhsy772i6dfobofu652e27f5hx6y5cpj7rgydd.com as a live Kraken-branded crypto drainer landing page. The domain was created on August 17, 2025—just days ago—through NICENIC INTERNATIONAL GROUP CO., LIMITED and currently resolves to 104.21.49.46. At the time of analysis, VirusTotal returned 15 out of 95 engines flagging the URL, indicating it is not yet widely blacklisted despite clear impersonation of the Kraken exchange. This domain is actively serving a fake Kraken login page (title: kraken4qzqnoi7ogpzpzwrxk7mw53n5i56loydwiyonu4owxsh4g67yd.onion зеркало вход) and is configured to harvest credentials and seed phrases, typical of a crypto drainer setup. The attacker registered the domain only hours after the real Kraken site was in the news cycle, leveraging a Google Trust Services SSL certificate to appear legitimate. WHOIS shows privacy protection, but the registrar and creation window are red flags for opportunistic fraud. If you visited this site, immediately revoke any connected wallet permissions and transfer remaining assets to a clean wallet. Scan your device with a reputable anti-malware tool and rotate all passwords used on the real Kraken site. Report the domain to PhishDestroy for takedown and share your wallet addresses so the community can block associated drainer addresses.
Intelijen Keamanan Jaringan Registrar context
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| DNS4EU | kraken3yvbvzmhytnrnuhsy772i6dfobofu652e27f5hx6y5cpj7rgydd.com |
malicious | Sinkholed |
Alur Tanggapan Ancaman Pipeline
Status Daftar Blokir Publik
Tangkapan tersimpan
Intelijen Domain
Rincian teknisDNS, SAN SSL, cap waktu
ICANN OVERSIGHT
Akreditasi dan konteks RAA
Akreditasi dan konteks RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Latest Classified Outcome 2026-08-22 02:48:13 UTC
Teknologi · 2 identified
Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
www.cloudflare.com Keyakinan 100%HTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.
httpwg.org Keyakinan 100%Analisis VirusTotal
Analisis Performa Situs
Google PageSpeed Insights — mobile performance audit of kraken3yvbvzmhytnrnuhsy772i6dfobofu652e27f5hx6y5cpj7rgydd.com · checked Apr 21, 2026
Analisis Konfigurasi Situs
Bukti & Laporan Eksternal
PD-20260421-370A94 Recipient: abuse@nicenic.net Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive