krakenmaarket[.]com

krakenmaarket.com is currently active and serving HTTP responses with a status code of 200. The domain resolves to Cloudflare’s authoritative name servers keira.ns.cloudflare.com and tim.ns.cloudflare.com, indicating the use of Cloudflare’s DNS and possibly its edge protection services. The registration data shows the registrar as NICENIC INTERNATIONAL GROUP CO., LIMITED, but no creation or expiration dates are provided in the available intelligence. The domain appears on a single security blocklist and is explicitly listed as blocked by the PhishDestroy feed, confirming that at least one trusted anti‑phishing source has taken mitigation action.

VirusTotal analysis shows that seven out of ninety‑one scanning engines have flagged the domain, which aligns with its classification as a high‑risk phishing site. No additional artifacts such as SSL certificate details, page title, or known phishing kits were supplied, leaving the precise payload and target brand undefined. The lack of visible page content or associated IP address limits the ability to attribute infrastructure or assess the scale of the campaign.

Defenders should prioritize adding krakenmaarket.com to outbound filtering rules and DNS‑based blocklists, monitor any resolution changes to the Cloudflare name servers, and consider automated takedown requests to the registrar NICENIC INTERNATIONAL GROUP CO., LIMITED. Continuous re‑scanning on VirusTotal and inclusion in threat‑intel sharing platforms will help track further detections. Organizations using web‑proxy or secure web‑gateway solutions should enforce blocklist updates and inspect HTTP traffic for anomalous redirects originating from this domain.