qiaohukids[.]com

On July 24, 2026 security researchers examined the domain qiaohukids.com, which was created on February 21, 2026 and registered through Gname.com Pte. Ltd. The authoritative nameservers are a.share-dns.com and b.share-dns.net. DNS resolution points to IP address 107.148.45.142, an address located in Hong Kong and announced by AS398478 PEG TECH INC. The site presents an HTTPS certificate issued by Let’s Encrypt (YR2) and returns an HTTP 301 redirect, indicating a permanent move to another location. The page title harvested from the live site reads “K网(Kraken)交易所最新版下载_K网(Kraken)安卓最新版app下载”, which explicitly references the Kraken brand and suggests a cryptocurrency‑related download.

VirusTotal has recorded four detections out of ninety‑three scanning engines, confirming that a minority of security vendors consider the domain malicious. The domain is listed on three public blocklists—PhishDestroy, MetaMask, and SEAL—further corroborating its illicit nature. Classification from the intelligence set marks the activity as brand impersonation and a crypto scam, with a high risk rating and an active status.

While the available data confirms the infrastructure and branding abuse, the specific content served after the redirect, any credential‑harvesting forms, or malicious binaries have not been publicly disclosed, leaving the exact payload unknown. Defenders should therefore block both the domain and its hosting IP at perimeter firewalls and DNS resolvers, add the three blocklist entries to URL filtering policies, ensure endpoint protection solutions are updated to include the four VirusTotal detections, and consider initiating a takedown request with the registrar Gname.com. Continuous monitoring of DNS queries for the domain and related sub‑domains is advised, as is the application of strict outbound traffic controls to prevent potential command‑and‑control communication from the identified IP address.