krakenvideo[.]net

This domain, krakenvideo.net, poses as a legitimate Kraken-branded store selling video equipment, cameras, and electronics but is a confirmed phishing site designed to harvest user credentials and payment information. The site displays a page title in Russian and English, "Kraken / Кракен — магазин видеооборудования, камер, студийного света и электроники," suggesting it targets a broad, multilingual audience. Analysis indicates the site is not affiliated with the legitimate Kraken cryptocurrency exchange or any authorized reseller, despite using its branding to lend credibility to the scam. Infrastructure analysis reveals multiple technical indicators supporting its malicious nature. The domain was registered on June 24, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar frequently associated with high-risk domains. As of the latest scan, only 2 out of 95 security vendors on VirusTotal flag the domain as malicious, indicating either low detection rates or recent deployment of evasion techniques. The site resolves to the IP address 104.21.48.79, which is part of a network range commonly used for bulletproof hosting, further complicating takedown efforts. The SSL certificate is issued by Google Trust Services, providing a false sense of security to visitors. Users who have visited krakenvideo.net or entered any information on the site should take immediate action to mitigate risk. First, cease all interaction with the domain and avoid clicking any links or downloading files from it. If login credentials or payment details were submitted, change passwords for all associated accounts, enable multi-factor authentication where available, and monitor financial statements for unauthorized transactions. Report the incident to relevant financial institutions and consider filing a complaint with local cybercrime authorities or organizations such as the Internet Crime Complaint Center (IC3). Additionally, scan the device used to access the site for malware, as phishing pages may deploy malicious scripts or redirect to exploit kits.