onion[.]kraken-ssylka[.]click

This domain onion.kraken-ssylka.click resolves to IP address 104.21.16.31 and was created on April 05 2026 through registrar Dynadot LLC with a Let's Encrypt certificate. The domain remains active as of July 12 2026 and matches the high-risk brand impersonation classification targeting Kraken. Its page title directly references Kraken working mirrors in 2026 which aligns with the observed impersonation pattern. Gridinsoft assigns a trust score of 0 out of 100 and the domain appears on one security blocklist while receiving flags from 7 out of 95 vendors on VirusTotal.

Infrastructure analysis shows registration details and hosting choices typical of short-lived impersonation sites that leverage common certificate authorities and privacy-oriented registrars. The combination of the specific page title and explicit Kraken targeting provides concrete evidence of deliberate brand misuse rather than coincidental similarity. No ASN or geolocation metadata is supplied in the available records so the precise hosting provider location cannot be confirmed from the given data.

Defenders should treat the domain as an active high-risk artifact and incorporate the IP 104.21.16.31 along with the domain string into existing block lists and DNS filtering rules. Monitoring for new subdomains or similar registrations under the same registrar pattern is warranted because the site has persisted without takedown since April. Regular cross-checks against updated VirusTotal and blocklist feeds will help track any changes in vendor detection counts over time.