pos[.]krakenos[.]by

pos.krakenos.by is an active generic phishing infrastructure observed as of July 20 2026. The domain was registered on 15 April 2026 through the registrar Reliable Software, Ltd and is served by the authoritative name servers u1.hoster.by and u2.hoster.by. DNS resolution points to the single IPv4 address 87.232.65.92, which is the only host currently associated with the domain. The IP address is not listed as part of a known cloud provider range and has not been publicly associated with legitimate services. The domain appears on one security blocklist and has been explicitly blocked by the PhishDestroy phishing mitigation service. VirusTotal analysis shows that one out of ninety‑five scanned security vendors flagged the domain, indicating at least one detection for malicious activity. No additional public reputation scores, Safe Browsing checks, or open‑source intelligence (OTX) references were provided in the available data set. Because the domain is newly created, the short registration age (approximately three months) aligns with typical phishing campaign lifecycles that aim to exploit the trust window before detection mechanisms can fully propagate. No information about SSL/TLS configuration, HTTP response codes, page title, or landing‑page content is currently available, leaving the exact phishing lure and target brand unconfirmed. Defenders should treat pos.krakenos.by as high‑risk. Recommended actions include adding the domain and its resolving IP 87.232.65.92 to internal blocklists, monitoring DNS queries for the domain, and ensuring that outbound traffic to the associated IP is denied. Continuous re‑evaluation of the domain on VirusTotal and other multi‑engine scanners is advised to capture any changes in detection status. Network telemetry should be inspected for any recent connections to the IP address, and alerts should be generated for any successful TLS handshakes or HTTP requests targeting the domain.