kraken2-onion[.]com

The domain kraken2-onion.com was identified as a brand impersonation site specifically targeting Kraken, a well-known cryptocurrency exchange. This phishing domain is now offline, but while active it posed a serious threat to users attempting to log in, potentially draining their cryptocurrency holdings. The site mimicked Kraken's official login interface to steal credentials and private keys.

Technical analysis reveals concerning indicators: the domain was flagged by 13 of 95 VirusTotal vendors, indicating broad security consensus on its malicious nature. It was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar often associated with suspicious domains, and resolves to IP address 95.85.236.107. The domain was created on March 28, 2026, and appears on one security blocklist. AlienVault OTX includes it in a single threat intelligence pulse, further corroborating its malicious intent.

Although the site is currently offline, users should remain vigilant. Anyone who may have visited kraken2-onion.com should change their Kraken credentials immediately and enable two-factor authentication. For the latest status and additional safety guidance, always verify domains on PhishDestroy before entering sensitive information.