kraken7jmgt7yhhe2c4iyilthnhcugfylcztsdhh7otrr6jgdw667pqd-onion[.]net

PhishDestroy identifies an active brand impersonation campaign targeting Kraken users. This fraudulent site, kraken7jmgt7yhhe2c4iyilthnhcugfylcztsdhh7otrr6jgdw667pqd-onion.net, is designed to steal cryptocurrency by mimicking the legitimate Kraken exchange. Visitors should avoid entering any credentials or making transactions on this domain, as it poses a direct financial risk. This domain was flagged by 17 out of 95 security vendors on VirusTotal, indicating widespread suspicion of its malicious intent. The site was registered on February 23, 2026, through Gname 337 Inc, a registrar known for hosting high-risk domains. It resolves to IP address 45.130.151.196 and uses a Let's Encrypt SSL certificate to appear legitimate. These technical details confirm the site's fraudulent nature and its attempt to deceive users through a false sense of security. If you visited this domain, do not enter any personal information, login credentials, or cryptocurrency transactions. Disconnect from the site immediately and scan your device for malware. Report the domain to Kraken's official support channels and your local cybersecurity authorities. Stay vigilant and verify website URLs carefully before interacting with them.