kraads[.]cc

Analysis indicates that the domain kraads.cc was registered on February 21 2026 through NiceNIC International Group Co., Limited. The domain resolves to 188.114.96.3, an address owned by AS13335 Cloudflare, Inc. in the United States and is served behind Cloudflare with HTTP/3 enabled. The TLS certificate presented is issued by Google Trust Services under the WE1 label, confirming the use of a legitimate certificate authority but not implying benign intent. The website returned HTTP 403 at the time of observation, and the page title extracted reads “Реклама Кракен — смотреть онлайн бесплатно без рекламы”, which references the brand Kraken and aligns with the classification of brand impersonation.

Google Safe Browsing categorises the URL as a social engineering threat, and Gridinsoft assigned a trust score of 0 out of 100, indicating extreme malicious confidence. VirusTotal recorded 13 detections out of 93 scanning engines, reinforcing the malicious assessment. The domain appears on a single security blocklist and is explicitly listed by PhishDestroy as blocked. Nameserver configuration uses emely.ns.cloudflare.com and venkat.ns.cloudflare.com, both Cloudflare-managed.

No further content analysis is available beyond the page title; the exact page structure and any credential‑capture mechanisms have not been observed. The current status is offline, suggesting the operators have taken the site down, but the infrastructure—Cloudflare IP, legitimate TLS certificate, and registrar—remains reusable for future campaigns. Defenders should continue to block kraads.cc at perimeter and DNS layers, monitor for re‑use of the associated IP address or nameservers, and add the domain to internal watchlists. Threat intel feeds should be updated to reflect the brand impersonation of Kraken and the social engineering classification, and any future resolutions to the same IP or similar Cloudflare‑served domains should be investigated promptly.