kraken56[.]net
“Captcha”
Resumen de las pruebas
The domain kraken56.net was observed on 2026-07-12 as an active brand-impersonation site targeting the cryptocurrency exchange Kraken. The site issues an HTTP 301 redirect and displays a page titled “Captcha”. No further page content has been disclosed, so the exact malicious payload remains unverified. Infrastructure analysis shows the domain resolves to 188.114.96.3, a host within Cloudflare’s network (AS13335, United States). Authoritative name servers are miguel.ns.cloudflare.com and raquel.ns.cloudflare.com, confirming reliance on Cloudflare DNS. The TLS certificate is issued by Google Trust Services under the WE1 profile, providing a legitimate certificate chain despite the malicious purpose. Cloudflare services such as Browser Insights and HTTP/3 are detected, indicating modern transport and analytics capabilities. Threat intelligence reports that eight of ninety‑five VirusTotal scanners have flagged the domain, and it is listed on one external blocklist. The site is cataloged by PhishDestroy, and Gridinsoft assigns a trust score of zero out of one hundred, reinforcing the high‑risk classification. Registration records reveal the domain was created on 2025-11-20 through NiceNIC International Group Co., Limited, a registrar known for rapid provisioning. Defenders should immediately add kraken56.net to URL filtering and firewall blocklists, and consider blocking the resolved IP address 188.114.96.3 if it does not serve legitimate traffic. Monitoring DNS queries for the Cloudflare name servers may uncover additional related domains. Because the only publicly observable artifact is the “Captcha” page title, further content analysis is recommended to determine whether credential‑stealing forms or cryptocurrency‑draining scripts are present. Continuous observation of traffic to the IP and rapid response to any detected exploitation attempts are advised.
Data Coverage
Inteligencia de seguridad de red
Proceso de respuesta ante amenazas Pipeline
Cobertura de listas de bloqueo
10 fuentes externas supervisadas · instantánea del 12/08/2026
10 fuentes externas supervisadas Sin coincidencias
Cronología de detección
-
VirusTotal
8 → 9
-
VirusTotal
9 → 10
-
VirusTotal
10 → 9
-
Estado del dominio
Accesible → Inaccesible
-
Estado del dominio
Accesible → Inaccesible
-
Estado del dominio
Inaccesible → Accesible
Captura guardada
Inteligencia de dominios
Detalles técnicosDNS, nombres TLS y marcas de tiempo
ICANN OVERSIGHT
Acreditación y contexto RAA
Acreditación y contexto RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Análisis de VirusTotal
Análisis del rendimiento del sitio
Google PageSpeed Insights — mobile performance audit of kraken56.net · checked Mar 2, 2026
¿Te ha afectado esta página web?
Si ingresó credenciales de cuenta, información personal o de pago, o descargó un archivo de este dominio, tome medidas inmediatas. A continuación encontrará recursos que le ayudarán a informar el incidente y protegerse.
Informa a las autoridades locales
Seleccione su país para obtener contactos oficiales de cibercrimen o crear un borrador de queja →.
Comprobar cualquier dominio
Análisis de amenazas utilizando listas de bloqueo almacenadas, WHOIS, DNS y evidencia de escaneo público
Escanear ahoraDenunciar un intento de phishing
Envía los dominios sospechosos a nuestra base de datos de amenazas: protege a la comunidad
DenunciarFlujo de amenazas en tiempo real
Informes de phishing recientes y cambios de disponibilidad observados
MonitorizarMantente informado, mantente a salvo
Supervisa las amenazas en tiempo real o impugna esta entrada si crees que se trata de un falso positivo.