krakenplatform[.]one

Analysis of the domain krakenplatform.one confirms its classification as a crypto scam impersonating the Kraken cryptocurrency exchange. Registered on December 19, 2025, through Dynadot LLC, the domain resolves to the IP address 104.21.58.59, hosted under AS13335 (Cloudflare, Inc.) in the United States. The domain's nameservers, dean.ns.cloudflare.com and fish.ns.cloudflare.com, further link it to Cloudflare infrastructure, a common tactic to obscure hosting origins and evade takedowns. At the time of this report, the domain is offline, though its prior operational status facilitated fraudulent activity. The page title, 'Kraken-bot,' directly references the targeted brand, Kraken, aligning with the scam type identified as a crypto scam.

Detection metrics indicate elevated risk: 15 of 93 security vendors on VirusTotal flagged the domain as malicious, while AlienVault OTX lists it in three threat intelligence pulses. Additionally, the domain appears on at least one security blocklist, and PhishDestroy has explicitly blocked it. The absence of an SSL certificate further reduces its legitimacy, as modern secure sites typically enforce HTTPS. Defenders should treat this domain as a confirmed threat vector for Kraken impersonation.

While the domain is currently offline, its prior activity and detection history warrant continued monitoring. Organizations are advised to update blocklists, alert users to the specific domain, and investigate any historical interactions with the IP 104.21.58.59 or associated Cloudflare infrastructure. Given the domain's registration age and detection footprint, it may resurface under altered infrastructure or related domains. No further content analysis is available at this time, as the site's exact fraudulent mechanisms remain unconfirmed.