kraken-pro-signals[.]netlify[.]app

Analysis of kraken-pro-signals.netlify.app indicates a crypto scam operation impersonating the Kraken brand, currently offline as of July 24, 2026. The domain was hosted on Netlify's infrastructure and resolved to IP address 35.157.26.135, geolocated in Germany under Amazon.com, Inc.'s AS16509. No nameservers were detected at the time of analysis, and the HTTP response returned a 404 status, suggesting the site may have been removed or disabled. The SSL certificate was issued by DigiCert Inc (DigiCert Global G2 TLS RSA SHA256 2020 CA1), a legitimate certificate authority, which does not mitigate the domain's fraudulent intent but confirms encrypted connections were possible during its active period. The page title, 'KRAKEN PRO SIGNALS,' directly references the Kraken cryptocurrency exchange, aligning with the reported scam type of crypto fraud.

Detection data from security vendors is limited but notable: eight of 95 engines on VirusTotal flagged the domain as malicious, and it appeared on one security blocklist. The domain was explicitly blocked by PhishDestroy, a phishing-specific detection service, reinforcing its classification as a brand impersonation threat. Infrastructure analysis reveals the domain was registered through Netlify, a platform commonly used for legitimate web hosting but also exploited for phishing due to its ease of deployment. The absence of nameservers and the 404 status indicate takedown efforts may have been successful, though defenders should remain vigilant for potential re-emergence under similar domains or hosting providers.

No evidence of a phishing kit or additional technologies beyond Netlify and HSTS was identified in the available data. Defenders are advised to monitor for related domains using 'kraken' or 'pro signals' in their naming conventions, particularly those hosted on cloud platforms like Netlify or Amazon Web Services.