# netkraken.com — MALICIOUS

> netkraken.com is a phishing site impersonating Kraken. Avoid this domain to protect your credentials and assets.

## Summary
PhishDestroy has identified netkraken.com as a medium-risk phishing domain impersonating the well-known cryptocurrency brand Kraken. Users encountering this domain face potential credential theft and unauthorized access risks. Although the site is currently offline, it was flagged by 9 out of 95 security vendors on VirusTotal and appears on two security blocklists, confirming its malicious intent.

This phishing domain was registered through REGRU-RU on February 21, 2026, and attempted to mimic Kraken’s branding to deceive visitors. The page title "Access Restricted | Hozzáférés korlátozva" suggests restricted access, possibly to lure users into entering sensitive information or downloading harmful content. The domain resolved to IP 185.199.108.153, a detail useful for network defenders blocking related traffic.

If you have visited netkraken.com, it is recommended to immediately change any passwords or credentials you may have entered. Monitor your accounts for suspicious activity and consider enabling multi-factor authentication where possible. Users should also run a full antivirus scan and avoid interacting with suspicious emails or links referencing this domain. Staying vigilant and informed helps reduce the risk posed by such impersonation attempts.

## Threat Details
- Verdict: MALICIOUS
- Site status: dead (HTTP 403)
- Target brand: Kraken
- Page title: Access Restricted | Hozzáférés korlátozva

## Domain Intelligence
- Registered: 2026-02-21 07:01:08
- Registrar: REGRU-RU
- Country: RU
- IP: 185.199.108.153
- IP Org: Cloudflare CDN
- Nameservers: ["demi.ns.cloudflare.com", "jakub.ns.cloudflare.com"]
- SSL Issuer: Google Trust Services / WE1

## Detection Status
- VirusTotal: 9 vendors flagged
  Vendors: ["ADMINUSLabs", "ChainPatrol", "alphaMountain.ai", "CRDF", "CyRadar", "Forcepoint ThreatSeeker", "Gridinsoft", "Seclookup", "SOCRadar"]
- Google Safe Browsing: clean
- Blocklists: 2 hits
  Lists: ["PhishDestroy", "MetaMask"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019bb77c-af6e-76bb-9dbf-8464b967a479.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/15b5628d-e340-40b0-898c-ecd3b1ca40e7
- PhishDestroy: https://phishdestroy.io/domain/netkraken.com/
- LLM endpoint: https://phishdestroy.io/domain/netkraken.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/netkraken.com/
Last updated: 2026-03-19