kraken7jmgt7yhhe2c4iyilthnhcugfylcztsdhh7otrr6jgdw667pqdonion[.]net

PhishDestroy identifies kraken7jmgt7yhhe2c4iyilthnhcugfylcztsdhh7otrr6jgdw667pqdonion.net as an active threat with an elevated risk level due to its specific role in brand impersonation targeting Kraken. This domain is designed to deceive users into believing they are interacting with the legitimate Kraken platform, typically through fake login pages that can lead to credential theft or crypto asset draining.

Technical analysis reveals that this domain was created recently on February 23, 2026, and is registered through Gname 019 Inc. It resolves to the IP address 45.130.151.196 and uses a Let's Encrypt SSL certificate, which can falsely provide a sense of security to unsuspecting victims. VirusTotal reports that 16 out of 95 security vendors have flagged this domain, highlighting its malicious intent. While there is no direct mention of blocklisting status or trust scores, the high detection ratio and the nature of the registrar and hosting arrangement contribute to its suspicious profile.

To mitigate the risks posed by this brand impersonation, users should avoid clicking on unsolicited links or entering credentials on suspicious Kraken-branded sites. Verification on trusted threat intelligence platforms like PhishDestroy is strongly advised before interacting with any Kraken-related login pages. Organizations should consider implementing domain filtering and educating users about the risk of sophisticated impersonation attacks. Continuous monitoring for such domain registrations and SSL certificates can help detect and neutralize similar threats early.