slon5[.]vip

This domain, slon5.vip, has been assessed at an elevated risk level due to brand impersonation specifically targeting the cryptocurrency exchange Kraken. The threat involves mimicking Kraken's login interface to steal user credentials or sensitive information, a common tactic in phishing campaigns. The domain is now offline, but its prior activity poses residual risks to users who may have interacted with it.

Key indicators include a VirusTotal detection rate of 5 out of 95 security vendors, registration through Dynadot Inc, and an IP address of 82.97.245.39. The domain was created on April 7, 2026, and its SSL certificate was issued by Let's Encrypt (E7). It appeared on one security blocklist and had a page title of 'KRAKEN' to impersonate the legitimate brand. These details confirm the malicious intent behind the domain.

Users who may have visited slon5.vip should immediately change their Kraken account passwords and enable two-factor authentication. They should also monitor their accounts for unauthorized activity and report any suspicious interactions to Kraken support. Avoid clicking on links from unsolicited messages, and always verify the URL before entering credentials.