kra10[.]net

kra10.net is currently offline but was identified as a brand‑impersonation site targeting Kraken. The domain was registered on 16 August 2024 through NiceNIC International Group Co., Limited and is hosted on Cloudflare’s network (AS13335) with the IP address 188.114.96.3 located in the United States. DNS resolution uses Cloudflare’s authoritative nameservers princess.ns.cloudflare.com and sterling.ns.cloudflare.com. No TLS certificate is presented, indicating the site was served over plain HTTP when active.

The page title returned “KRAKEN”, matching the targeted brand, and the listed scam type is “Crypto Scam”. Reputation scoring from Gridinsoft assigns a trust score of 0 / 100, and the domain is listed on PhishDestroy’s blocklist as well as one additional security blocklist. VirusTotal analysis shows that two of ninety‑three AV engines flagged the domain, confirming malicious intent despite the low detection count. The limited detection footprint suggests a short‑lived or low‑profile campaign, but the combination of brand impersonation, zero trust score, and blocklist presence elevates risk.

Uncertainty remains regarding the exact content served before takedown, as no SSL or HTTP response details are available. Defenders should continue to block the domain at network perimeter, monitor DNS queries for the associated IP and nameservers, and add the domain to internal threat‑intel feeds. Ongoing observation of Cloudflare‑hosted IP ranges for similar impersonation activity is recommended, as is periodic re‑scanning of the domain should it reappear.