kraken-review[.]com

kraken-review.com was registered on 26 December 2025 through NiceNIC International Group Co., Limited and assigned the Cloudflare authoritative name servers cleo.ns.cloudflare.com and elsa.ns.cloudflare.com. DNS resolution returns the IPv6 address 2607:f8b0:4004:c21::93, which belongs to AS15169 operated by Google LLC and is geolocated to the United States. No TLS certificate is presented for the host, indicating that HTTPS was never enabled. The sole observable HTTP response returned the page title “Google”, which does not contain any reference to the targeted brand.

The domain is listed on a single security blocklist and has been flagged by the PhishDestroy service as a malicious site. VirusTotal analysis shows that eight of ninety‑three scanning engines identified the domain as malicious, providing additional corroboration of its abusive nature. The site is currently taken offline, so active content cannot be inspected, but the registration date, hosting details, and blocklist presence are consistent with a newly created crypto‑related impersonation campaign targeting Kraken.

Uncertainty remains regarding the specific payload or phishing pages that may have been served before takedown, as no screenshots or content hashes are available. Defenders should continue to block the domain at network perimeter, monitor for any resurgence of the same host or IP range, and add the domain to internal threat intelligence feeds. Observers should also watch for other domains registered by the same registrar that use Cloudflare name servers and resolve to the same Google‑owned IP block, as these patterns have been employed in recent brand‑impersonation operations.