ask-kraken-support-number[.]webflow[.]io

The domain ask-kraken-support-number.webflow.io was registered on May 08, 2013 and is delegated to the registrar MarkMonitor, Inc. DNS resolution points to the IP address 172.64.151.8, which belongs to AS13335 Cloudflare, Inc. and is geolocated in the United States. The authoritative nameservers are journey.ns.cloudflare.com and lamar.ns.cloudflare.com, indicating that the site is fronted by Cloudflare’s edge network and supports HTTP/3. The TLS certificate presented is issued by Google Trust Services under the WE1 intermediate, confirming that the connection is encrypted with a legitimate certificate chain.

The page title observed during the brief crawl reads “Kraken Support Number (+1 (808) 400-3084) Kraken Support Number,” directly referencing the cryptocurrency exchange Kraken and suggesting a brand‑impersonation scam aimed at acquiring user credentials or funds. Google Safe Browsing classifies the site as social engineering, and VirusTotal records 12 detections out of 95 scanned vendors, reinforcing the malicious assessment. The domain appears on a single public blocklist and has been actively blocked by the PhishDestroy service.

At the time of analysis the HTTP response returned a 404 status and the site was taken offline, limiting immediate exploitation but leaving the infrastructure footprint available for attribution. Defenders should continue to monitor the IP address 172.64.151.8 for any resurgence of malicious activity, enforce outbound filtering for the displayed support phone number, and add the domain to internal blocklists. Given the confirmed impersonation of Kraken and the presence of multiple security vendor detections, organizations using Kraken services should educate users about the fraudulent support number and verify communications through official Kraken channels only.