kraken[.]com[.]support[.]bc1qrkac4tkr20rl2ra33f69pud8wc9xgyyvarvdly[.]onyxoilgas[.]com

The domain kraken.com.support.bc1qrkac4tkr20rl2ra33f69pud8wc9xgyyvarvdly.onyxoilgas.com is flagged as a high‑risk generic phishing threat as of July 20, 2026. Registration information shows the domain was created on April 24, 2012 through PDR Ltd. d/b/a PublicDomainRegistry.com, and it resolves to the IP address 162.222.225.153. Authoritative name servers are ns1.bh-71.webhostbox.net and ns2.bh-71.webhostbox.net, indicating hosting on the WebhostBox platform. The domain is actively listed on three security blocklists and has been blocked by PhishDestroy, MetaMask, and SEAL. Google Safe Browsing has flagged the site for social engineering, reinforcing the phishing classification. A VirusTotal scan involving 95 vendor engines returned no detections, but the lack of detections does not imply safety. Current evidence confirms the domain remains active and continues to pose a high risk. Defenders should add the domain and its resolving IP to deny‑list rules, monitor DNS queries for the associated name servers, and enforce web‑filter policies that block access to the URL. Continuous re‑evaluation is advised, as further malicious activity could emerge without additional public indicators.