kraken-market-tor[.]com

The domain kraken-market-tor.com has been identified as a brand impersonation threat, targeting the cryptocurrency exchange Kraken. The risk level associated with this domain is elevated, posing a significant threat to users who may inadvertently interact with it, potentially leading to financial loss or credential theft.

Analysis indicates that kraken-market-tor.com has been flagged by 5 out of 95 security vendors on VirusTotal, suggesting a moderate level of recognition among security communities. The domain is registered through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar that has been associated with various suspicious domains. The domain was created on March 27, 2026, and currently resolves to the IP address 172.67.176.143. The SSL certificate for the domain is issued by Let's Encrypt, which is a common choice for phishing sites due to its ease of use and credibility with users. The domain appears on one security blocklist and has a trust score of 0 out of 100 on Gridinsoft, indicating a high level of suspicion. Additionally, the domain is mentioned in one threat intelligence pulse on AlienVault OTX, further corroborating its malicious nature.

To mitigate the risks associated with this brand impersonation threat, users are advised to verify the URL of any Kraken-related page they visit, ensuring it matches the official Kraken domain. It is also recommended to access Kraken services only through trusted bookmarks or directly from the official website. Security software and browser extensions that can detect and block phishing sites should be kept up to date. Organizations should consider adding this domain to their blocklists and educating employees about the dangers of interacting with unverified or suspicious websites that mimic well-known brands.