The domain kraken2more.com is currently active and has been identified as a generic phishing site. Registration data shows the domain was created on July 24, 2026 and was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED. DNS resolution points to the IP address 104.21.82.221, and the authoritative nameservers are coby.ns.cloudflare.com and georgia.ns.cloudflare.com, indicating use of Cloudflare’s DNS infrastructure.
VirusTotal analysis reports that 2 of 91 security vendors have flagged the domain, demonstrating that a minority of scanners have detected malicious behavior. The domain is listed on one external security blocklist and has been blocked by the PhishDestroy service, confirming that at least one dedicated anti‑phishing platform recognizes it as a threat. No additional intelligence such as page title, SSL certificate details, HTTP status codes, or Safe Browsing verdicts is presently available, and the exact phishing payload or targeted brand has not been disclosed.
Given the recent creation date, the active status, and the presence on a blocklist, defenders should proactively add kraken2more.com to network and endpoint block lists, monitor DNS queries for the associated IP, and enforce URL filtering rules that deny traffic to this host. Continuous re‑evaluation is advised as further telemetry, such as payload samples or victim reports, may emerge and refine the risk assessment.