krakcom[.]net

The domain krakcom.net was registered on December 01, 2025 through NiceNIC International Group Co., Limited and is currently hosted on an IP address owned by AS42624 Global-Data System IT Corporation, located in Switzerland (185.208.156.66). The domain resolves to this IP without an SSL certificate, and its authoritative nameservers are ns1.safe-networks.net and ns2.safe-networks.net. The site’s page title reads "Кракен шоп | официальный маркетплейс кракен", indicating a direct attempt to impersonate the Kraken brand. Google Safe Browsing flags the domain for social engineering, and AlienVault Open Threat Exchange lists it in a single threat‑intel pulse.

The Gridinsoft trust score is 0 out of 100, reflecting a very low reputation. VirusTotal analysis shows that 16 of 95 scanning engines flagged the domain as malicious, and it appears on one external security blocklist. The domain is also blocked by PhishDestroy and is reported as offline at the time of analysis. These data points collectively demonstrate a high‑risk brand‑impersonation campaign targeting Kraken users.

The lack of TLS further reduces user trust and facilitates credential harvesting. Defenders should add the domain to internal blocklists, monitor DNS queries for the associated IP range, and ensure that endpoint security solutions are updated with the latest detection signatures. Network traffic to the IP address should be inspected for anomalous activity, and users should be warned about the absence of HTTPS and the social‑engineering classification. Continuous monitoring of the registrar NiceNIC and the AS42624 network is recommended to detect any re‑deployment of the infrastructure.