krakeninterestbinaries[.]icu

This domain, krakeninterestbinaries.icu, was created on 21 March 2025 and is currently taken offline. Infrastructure analysis shows it resolved to the IP address 172.67.204.61, which belongs to Cloudflare, Inc. (AS13335) and is geolocated in the United States. The domain uses Cloudflare’s DNS service, as indicated by the authoritative nameservers agustin.ns.cloudflare.com and annabel.ns.cloudflare.com, with an additional placeholder entry labeled null. No TLS certificate was observed, meaning the site operated without HTTPS encryption. Registration information lists OwnRegistrar, Inc. as the registrar, providing no further transparency about the registrant.

Brand‑targeted intelligence identifies the site as a crypto‑related scam that impersonates the cryptocurrency exchange Kraken. The page title returned by the server is “kraken Interest Binaries”, reinforcing the attempt to lure Kraken users. Google Safe Browsing flagged the domain for social engineering, and PhishDestroy has added it to its blocklist. VirusTotal scans returned 14 detections out of 93 security vendors, confirming that multiple anti‑malware engines consider the domain malicious.

The domain also appears on one additional security blocklist. Given the high‑risk classification, defenders should ensure that the IP address 172.67.204.61 is blocked at network perimeter devices, add krakeninterestbinaries.icu to local DNS deny lists, and monitor for any future re‑registration of the same name or similar variants. Continuous observation of Cloudflare‑originated traffic for similar brand‑impersonation patterns is recommended. The lack of SSL and the offline status limit immediate victim interaction, but the historical evidence suggests a coordinated attempt to defraud Kraken users through a crypto‑interest scheme.