kraken-onion-link[.]info

PhishDestroy identifies kraken-onion-link.info as an active phishing site designed to steal login credentials by impersonating the legitimate Kraken cryptocurrency exchange. The domain poses as an onion-style link, suggesting Tor network access, but serves malicious pages instead. Users who click might unknowingly hand over their Kraken account details or cryptocurrency wallets to attackers. The site mimics branding and login flows to appear authentic, tricking visitors into entering sensitive information. Always verify URLs using official Kraken channels before entering any credentials.

This domain was flagged following intelligence showing it resolved to IP address 172.67.205.218 using Cloudflare nameservers amos.ns.cloudflare.com and kay.ns.cloudflare.com. Registered on May 07, 2026 through Dynadot Inc, it remains active despite zero detections on VirusTotal as of the latest scans. The domain's recent creation and use of cloaking via CF proxy highlight early-stage deployment typical of opportunistic credential phishing campaigns. Monitoring tools flagged the onion-link theme, commonly associated with fake deep/dark web services mimicking legitimate crypto platforms.

If you visited kraken-onion-link.info, immediately change your Kraken password using the official website or app. Enable two-factor authentication if not already active. Scan your device with updated antivirus software to detect any installed malware. Avoid entering any credentials on this site. Report the URL to Kraken's support team and consider revoking any API keys previously used with this domain. Monitor your accounts for unauthorized transactions and enable withdrawal alerts. Use only bookmarked or manually typed official Kraken URLs for future visits.