baudokraken[.]online

Analysis as of July 24 2026 indicates that the domain baudokraken.online, created on 20 October 2025 and registered via Go Daddy, LLC, resolves to the IPv4 address 212.85.6.214 hosted in Brazil under AS47583 (Hostinger International Limited). The domain is served by the generic parking nameservers ns1.dns-parking.com and ns2.dns-parking.com and does not present an SSL/TLS certificate, implying unencrypted HTTP communication. The page title returned when the site was reachable was "Carregando Jogo…", which does not disclose any legitimate Kraken branding but aligns with the reported crypto‑scam classification. VirusTotal records show that 3 of 95 scanned security vendors flagged the domain as malicious, and the domain appears on one external blocklist.

Gridinsoft assigned a trust score of 0 out of 100, reinforcing the malicious assessment. PhishDestroy has also listed the domain as blocked. The threat profile is identified as brand impersonation targeting the cryptocurrency exchange Kraken, suggesting the site may have been used to lure victims into fraudulent crypto transactions. The current offline status prevents further live probing, leaving the exact payload or phishing flow unknown.

Defenders should continue to block the domain at perimeter filters, update URL reputation lists, and monitor the associated IP address for any future activation. Incident response teams should also consider reviewing any outbound connections to the IP 212.85.6.214 in recent logs, as the infrastructure may be reused for other campaigns. Because the domain lacks TLS encryption and is associated with low trust scores and multiple detections, it should be treated as high‑risk for credential or financial theft. Ongoing intelligence collection is recommended to capture any re‑appearance or related domains that reuse the same registrar or hosting provider.