kraken-krab15[.]sbs

The domain kraken-krab15.sbs was registered on December 25, 2025 through Global Domain Group LLC and is served by Google’s Cloud DNS nameservers (ns-cloud-c1.googledomains.com, ns-cloud-c2.googledomains.com, ns-cloud-c3.googledomains.com). DNS resolution points to IP address 186.2.175.37, which is advertised by AS59692 (IQWeb FZ-LLC) and located in Belize. No TLS certificate is presented, meaning the site is reachable only over unencrypted HTTP. The page title returned during the brief observation, "Kraken krab2 - AT‑сообщество ценителей чёрной культуры," contains the Kraken brand name but otherwise references a Russian‑language community, suggesting a possible brand‑impersonation attempt aimed at cryptocurrency users.

Gridinsoft assigned a trust score of 0 out of 100, indicating maximal distrust. The domain has been placed on a single security blocklist and was actively blocked by the PhishDestroy service. VirusTotal analysis involved 93 security vendors, of which 14 reported malicious activity, and Google Safe Browsing classified the site as a social‑engineering threat.

The overall risk assessment is high, and the current operational status is offline. While the exact phishing kit and content details remain unknown because the site is no longer reachable, the observable infrastructure—low trust score, lack of HTTPS, reputable registrar combined with malicious detection rates—strongly supports a crypto‑related impersonation campaign. Defenders should continue to block the domain and associated IP address in network filters, monitor for any re‑registration attempts, and consider adding the ASN (AS59692) and the registrar (Global Domain Group LLC) to watchlists for related future activity.