kn2025[.]cc

This domain kn2025.cc was registered on March 26 2026 through NICENIC INTERNATIONAL GROUP CO., LIMITED and is currently active. The site returns HTTP 200 and presents the page title “KRAKEN”, indicating a brand‑impersonation campaign targeting Kraken users. DNS resolution points to IP 168.100.10.210, hosted in the Netherlands by BL Networks; the address is served via Cloudflare nameservers bjorn.ns.cloudflare.com and cortney.ns.cloudflare.com and presents a valid Let's Encrypt certificate (E8). Reputation services show a Gridinsoft trust score of 0/100 and six of ninety‑four VirusTotal scanners have flagged the domain. AlienVault OTX records the host in eight threat‑intel pulses, and the domain appears on one public blocklist maintained by PhishDestroy. The infrastructure suggests a low‑cost hosting setup typical of short‑lived impersonation sites, but no additional payload or credential‑harvesting details have been disclosed. Analysts should add kn2025.cc and its IP 168.100.10.210 to block lists, monitor for any DNS or SSL changes, and consider sink‑hole routing for traffic to this host. Continued observation is advised to detect potential evolution of the campaign.