krakenzerkalakr46at[.]space

Analysis of krakenzerkalakr46at.space shows an active brand‑impersonation campaign targeting users of the Kraken cryptocurrency platform. The domain was registered on December 25 2025 through NameSilo, LLC and resolves to the IP address 172.67.215.97, which is part of Cloudflare’s AS13335 network located in the United States. DNS configuration lists kyree.ns.cloudflare.com and lucy.ns.cloudflare.com as authoritative nameservers. No TLS certificate is present, meaning the site is served over plain HTTP.

The page title returned by the server contains multiple Cyrillic references and the strings “KRAKEN ОНИОН ССЫЛКА Kra46.at Kra46.cc КРАКЕН ДАРКНЕТ КРАКЕН ЗЕРКАЛО КРАКЕН САЙТ”, confirming an attempt to associate the site with the Kraken brand. Gridinsoft’s automated trust score rates the domain at 0 out of 100, and the domain appears on a single security blocklist. Google Safe Browsing flags the site for social‑engineering content, and PhishDestroy has already blocked it. VirusTotal records indicate that the domain was scanned by 93 antivirus engines, none of which returned a detection, but this absence does not imply safety.

The site is currently taken offline, yet its infrastructure—public Cloudflare hosting, lack of encryption, and low trust rating—suggests it was designed to lure victims into a crypto‑related scam. Defenders should continue to monitor the domain’s DNS and IP reputation, enforce blocklists that include this host, and educate Kraken users about unsolicited links that reference the brand. Because the domain’s content has not been publicly archived, further forensic capture would be required to determine the exact payload or phishing flow employed.