xn--krken-yqa[.]com

The domain xn--krken-yqa.com was registered on July 24, 2025 through Tucows Domains Inc. and is currently taken offline. DNS resolution points to IP address 202.92.7.88, which belongs to the Vietnam Posts and Telecommunications Group (ASN 135905) located in Vietnam. The domain uses a RapidSSL TLS RSA CA G1 certificate, indicating that TLS is available but does not provide any additional authentication of the site’s purpose. The authoritative nameservers are listed as 2-nest.pipe.ma, 1-ceci.njalla.do, and 3-pas.njalla.in, a configuration that is commonly observed in malicious hosting setups. The page title returned by the web server is simply "Hosting," offering no insight into the intended victim‑facing content.

Detection data show that the domain appears on two security blocklists, specifically PhishDestroy and Enkrypt, confirming that at least two independent anti‑phishing services have identified it as malicious. AlienVault OTX includes the domain in one threat‑intelligence pulse, further corroborating its abuse status. VirusTotal analysis recorded three detections out of ninety‑three scanners, indicating that a minority of AV engines flagged the domain as suspicious. Gridinsoft assigns a trust score of 0 / 100, reflecting a complete lack of confidence in the site’s legitimacy.

Given the combination of a recent registration, a Vietnamese hosting footprint, low‑trust SSL, multiple blocklist listings, and the presence of detections across independent platforms, the domain should be treated as a high‑confidence phishing indicator. Defensive teams are advised to add xn--krken-yqa.com to URL filtering and DNS block policies, monitor any outbound connections to its IP address, and consider sharing the indicator with threat‑intel sharing platforms. Continuous re‑evaluation is recommended in case the domain is re‑activated, but the current evidence supports immediate mitigation actions.