kraken-klirnet-vhod[.]sbs

This domain is flagged as a high-risk brand impersonation targeting Kraken, a cryptocurrency exchange. Analysis indicates the domain is currently active and resolving to an IP address in the United States, hosted by Cloudflare (AS13335). The domain was registered on February 21, 2026, through Gname.com Pte. Ltd., and uses Cloudflare nameservers and an SSL certificate issued by Google Trust Services. The page title explicitly references Kraken in Russian and describes a darknet marketplace operating via Tor, which is inconsistent with legitimate Kraken services. VirusTotal scanning shows 12 out of 93 security vendors flagging this domain as malicious, and it appears on three security blocklists, including PhishDestroy, MetaMask, and SEAL. AlienVault OTX records the domain in one threat intelligence pulse. The Gridinsoft trust score is 0 out of 100. Defenders should block this domain at the DNS or proxy level, monitor for related subdomains or variations, and report it to the relevant threat intelligence platforms. The exact page content beyond the title has not been analyzed, but the combination of impersonation indicators and low trust scores confirms malicious intent.