kraken-viet[.]com

Analysis of kraken-viet.com, observed on July 23, 2026, indicates a high‑risk brand‑impersonation campaign targeting the cryptocurrency exchange Kraken. The domain was registered on February 21, 2026 through Gname.com Pte. Ltd. and resolves to the Cloudflare edge address 104.21.51.179, associated with ASN 13335 (Cloudflare, Inc.) located in the United States. DNS resolution uses the Cloudflare authoritative nameservers lennox.ns.cloudflare.com and vera.ns.cloudflare.com, and the site presented a TLS certificate issued by Google Trust Services under the WE1 label, confirming the use of reputable TLS infrastructure to increase perceived legitimacy. The public page title “Kraken Viet – Register for free and earn money through Web3 finance” aligns with the declared scam type of a crypto scam, and the domain is explicitly recorded as impersonating the Kraken brand.

Google Safe Browsing classifies the site as social engineering, and the domain appears on one security blocklist, specifically PhishDestroy, which has already taken the site offline. VirusTotal analysis shows that 15 of 93 scanning engines flagged the domain, corroborating the malicious assessment. Infrastructure observations reveal exclusive reliance on Cloudflare services, a pattern frequently reused by financially oriented phishing operations.

The combination of a recent registration date, Cloudflare edge hosting, and a Google‑issued certificate is consistent with rapid‑deployment phishing kits that seek to leverage trusted TLS roots. Defenders should add 104.21.51.179 and the associated Cloudflare IP range to deny‑list rules, enforce DNS‑level blocking of kraken-viet.com, and monitor other domains registered via Gname.com Pte. Ltd. that resolve to Cloudflare edge nodes for similar brand‑impersonation cues. Continuous threat‑intel feeds should be consulted for emerging indicators, and any residual traffic should be inspected for credential‑harvesting attempts targeting Kraken users.