krakensupport[.]tech

The domain krakensupport.tech was registered on January 21, 2026 through GoDaddy.com, LLC and is presently listed as offline. DNS resolution points to IP address 160.153.076, which is attributed to AS209242 Cloudflare London, LLC and geolocated to the United States. The site presented a page title of "1 new message," aligning with the reported brand‑target of Facebook and the classification of a social media phishing campaign. Security telemetry shows the domain appears on three independent blocklists and has been actively blocked by PhishDestroy, MetaMask, and SEAL.

An SSL certificate identified as WE1 was observed, though no further certificate details are available. The Gridinsoft trust scoring system assigned a rating of 0 out of 100, indicating an extremely low trust level. VirusTotal analysis recorded four detections out of ninety‑three scanned security vendors, reinforcing the malicious assessment. No additional content or behavioral data has been publicly disclosed, leaving the exact phishing payload and credential‑harvesting mechanisms unverified.

Defenders should immediately add krakensupport.tech to web filtering and DNS blocking policies, monitor traffic to the associated IP address for any residual activity, and ensure that endpoint protection solutions incorporate the observed VirusTotal detections. Organizations should also reinforce user awareness campaigns focused on unsolicited Facebook‑related messages, emphasizing that legitimate Facebook communications do not originate from third‑party domains. Continuous observation of newly registered domains leveraging similar naming patterns is advised to pre‑empt future impersonation attempts.