kraken189[.]org

This domain, kraken189.org, is currently active and has been classified as a high‑risk crypto‑scam that impersonates the cryptocurrency exchange Kraken. The domain was registered on 10 December 2025 through Dynadot LLC and resolves to the IP address 184.94.213.243, which belongs to AS22612 Namecheap, Inc., located in the United States. DNS resolution uses three name‑servers – dns1.namecheaphosting.com, dns1.web-hosting.com, and dns2.namecheaphosting.com – indicating the use of a shared hosting environment. An HTTPS service is present; the presented certificate is issued by Sectigo Limited under the Sectigo RSA Domain Validation Secure Server CA, which is a standard domain‑validated certificate and does not provide any authentication of the site’s legitimacy. HTTP requests return status code 200 and the page title reported by scanners is “Default Web Site Page”, a generic placeholder that offers no insight into malicious content.

Reputation data show the domain appears on one security blocklist and is blocked by PhishDestroy. The Gridinsoft trust score is 0 / 100, reflecting extreme lack of trust. Google Safe Browsing flags the site for social engineering, and VirusTotal has raised alerts from 13 of 95 scanned security vendors, reinforcing the suspicion of malicious activity. The listed scam type is “Crypto Scam”, and the branding claim explicitly states impersonation of Kraken. Uncertainties remain because the actual landing page content has not been publicly disclosed; the generic page title suggests a placeholder, but no detailed analysis of phishing forms or credential‑stealing mechanisms is available.

Defenders should therefore treat any traffic to kraken189.org as malicious. Recommended actions include adding the domain and its resolving IP address to outbound blocklists, monitoring DNS queries for the three name‑servers, and ensuring that email filters block messages containing the domain.