kraken29-at[.]net

The domain kraken29-at.net was registered on February 21 2026 through DropCatch.com 476 LLC and resolves to IP address 188.114.96.3 in the United States under autonomous system AS13335. Nameservers nsg1.namebrightdns.com and nsg2.namebrightdns.com are in use, with the domain hosted behind Cloudflare infrastructure and protected by an SSL certificate labeled WE1. The observed page title is KRAKEN and the HTTP response returns a 302 status code, consistent with redirection behavior often seen in brand impersonation attempts.

Infrastructure analysis reveals a direct match to the reported brand target of Google, with the scam type classified as tech support. The domain carries a Gridinsoft trust score of 0 out of 100 and appears on one security blocklist. VirusTotal reports detections from 3 out of 95 vendors, while the domain is also listed as blocked by PhishDestroy. These indicators align with active high-risk brand impersonation activity that remains operational on the report date of July 12 2026.

The exact destination of the 302 redirect and the full content served to visitors cannot be determined from the available telemetry, leaving the precise landing page behavior uncertain. Registration age of roughly five months and use of privacy-oriented nameservers are common in both legitimate and malicious registrations, so they alone do not confirm intent. The combination of Google targeting, low trust score, and multi-vendor flags provides stronger evidence of malicious use.

Defenders should block the domain and its current IP at network and endpoint layers, add the nameservers to watch lists for rapid detection of similar assets, and review logs for any traffic to kraken29-at.net. Continued monitoring of DropCatch.com 476 LLC registrations that target major brands is advisable given the domain's ongoing active status.