krak-krak-com[.]square[.]site

The domain krak-krak-com.square.site is an active generic phishing site posing a high risk of credential theft or social engineering attacks. It does not impersonate a specific brand or deploy a known crypto drainer kit but is flagged by multiple security vendors for phishing activity. As of the latest assessment, the site remains operational and continues to host malicious content.

Technical indicators confirm the domain krak-krak-com.square.site is malicious. VirusTotal reports 11 of 95 security vendors flag it as phishing, including ADMINUSLabs, ChainPatrol, and alphaMountain.ai. Google Safe Browsing explicitly flags it for 'SOCIAL_ENGINEERING.' The domain appears on one security blocklist (PhishDestroy) and is registered through MarkMonitor, Inc., with a creation date of February 5, 2019. It resolves to IP address 74.115.51.4, hosted on Weebly, Inc. infrastructure (AS27647) in the US, and uses an SSL certificate issued by Let's Encrypt (E7). Detected technologies include Amazon Web Services and Cloudflare. The observed page title is 'Just a moment...' and returns an HTTP 404 status.

Users who may have interacted with krak-krak-com.square.site should immediately change any exposed credentials, enable two-factor authentication (2FA) on all accounts, and monitor for unauthorized access or fraudulent activity. Report the domain to Google Safe Browsing, PhishTank, or local cybersecurity authorities. If financial or crypto accounts were accessed, revoke any suspicious token approvals and consider transferring funds to a new, secure wallet.