h-apat[.]ach-acy3-cpat[.]ac[.]kraken[.]storeweb2002[.]com[.]br

The domain h-apat.ach-acy3-cpat.ac.kraken.storeweb2002.com.br was registered on February 21, 2026 and is currently taken offline. Infrastructure analysis shows it resolves to IP 51.75.195.124, which is hosted by OVH SAS in France under ASN 16276. The domain uses Let's Encrypt (R12) for TLS, presenting a valid certificate despite its malicious intent. HTTP requests return a 200 status code, and the web server stack consists of AlmaLinux, OpenSSL, and Apache HTTP Server.

The site is flagged as a crypto scam that impersonates the Kraken brand, matching the supplied brand target. Reputation services assign a Gridinsoft trust score of 0 out of 100, indicating extreme risk. VirusTotal reports that six of ninety-three security vendors flagged the domain, reinforcing the malicious assessment. The domain appears on three blocklists—PhishDestroy, MetaMask, and SEAL—and is blocked by those services.

Nameservers are ns1.he.net and ns2.he.net. Defenders should continue to block the domain and its associated IP address, monitor for any re‑hosting attempts, and enforce strict outbound filtering for traffic to the OVH ASN. Given the confirmed impersonation of Kraken and the low trust score, the domain should be treated as high‑risk and excluded from all trusted browsing lists.