vips[.]baudokraken[.]com

Analysis of vips.baudokraken.com was performed on July 24, 2026. The domain was registered on October 03, 2025 through HOSTINGER operations, UAB and is hosted on Cloudflare’s network (ASN 13335). DNS resolution points to IP 188.114.97.3, which is located in the United States and is associated with Cloudflare, Inc. The authoritative nameservers listed are brit.ns.cloudflare.com, jonah.ns.cloudflare.com, sterling.ns.cloudflare.com, and yoland. No TLS certificate was presented during the HTTPS handshake, indicating the site was served without encryption. The HTTP response returned a page titled “Baú do Kraken - Weizhen Games”, which references the Kraken brand but does not provide a legitimate Kraken service.

The domain is classified as a brand‑impersonation crypto scam, targeting users of the Kraken cryptocurrency exchange. VirusTotal analysis shows that three of ninety‑five scanning engines flagged the domain as malicious, reinforcing the suspicion. The domain appears on one external security blocklist and has been actively blocked by the PhishDestroy feed. Current operational status is offline, confirming that the phishing infrastructure has been taken down. Defenders should add 188.114.97.3 to network‑level deny lists, enforce DNS filtering for the four Cloudflare nameservers, and ensure that any outbound connections to this domain are blocked.

Monitoring of newly registered domains that combine “kraken” with unrelated brand terms is recommended, as the naming pattern suggests a repeatable impersonation tactic. Continuous ingestion of blocklist feeds, including PhishDestroy, will help capture future iterations. Because the site lacked an SSL certificate, any attempted HTTPS connections would fail, providing an additional indicator for endpoint protection solutions. Organizations that rely on Kraken services should educate users about the unauthorized “Baú do Kraken” branding and advise verification of URLs before entering credentials or cryptocurrency addresses.