PhishDestroy first observed kraken2more.com on Jul 28, 2026. The hostname explicitly references Kraken; stored content metadata identifies the same apparent target. The captured page title is “МАРКЕТ KRAKEN - рыба от производителя”. Stored page analysis classifies the content as impersonation. Current evidence score: 81/100 (critical).
Positive findings are stored from 2 sources: VirusTotal and Spamhaus DBL. VirusTotal recorded 5 detections among 91 engines: alphaMountain.ai, CRDF, Fortinet, Gridinsoft, SOCRadar on Aug 7, 2026 at 02:12 UTC. Spamhaus DBL: DBL_PHISH on Jul 28, 2026 at 18:31 UTC. Non-positive and contextual checks: The separate external-blocklist snapshot contained no matches on Aug 8, 2026 at 10:20 UTC. Google Safe Browsing returned no flag on Jul 28, 2026 at 17:38 UTC. URLScan completed without a malicious verdict (score 0) on Jul 29, 2026 at 02:23 UTC.
HTTP 200 was recorded on Aug 8, 2026 at 10:52 UTC. Latest classified outcome: live content observed; cause content served on Aug 8, 2026 at 00:40 UTC. Registration records for the domain list NICENIC INTERNATIONAL GROUP CO., LIMITED as the registrar and Jul 24, 2026 as the creation date. Registration preceded first observation by 4 days. At collection time, the hostname resolved to 104.21.82.221 on AS13335 (Cloudflare, Inc.). The IP and ASN identify shared Cloudflare edge infrastructure; the origin server is not established by this address. DOM analysis on Jul 28, 2026 at 18:20 UTC returned 81/100. The evidence archive retains 2 visual captures from PhishDestroy and URLScan. TLS metadata lists Google Trust Services as the certificate issuer with validity through Oct 22, 2026; checked Jul 28, 2026 at 19:02 UTC.
The content indicators and 2 positive source findings support the current Kraken-themed impersonation classification.