home-pro-com[.]zapier[.]app

home-pro-com.zapier.app is currently listed as an offline crypto‑scam site that masquerades as a Kraken service. The page title observed in prior crawls, “KrakenPro Login Trading Hub,” directly references the Kraken brand, confirming a targeted impersonation. The domain resolves to the Amazon‑owned address 64.239.123.1, which belongs to AS16509 (Amazon.com, Inc.) and is hosted on Amazon Web Services with ancillary services from Vercel, Amazon S3, and Stripe. The TLS certificate is issued by Let’s Encrypt (R12), and the site advertised HSTS and reCAPTCHA protections, a typical pattern for credential‑harvesting kits.

HTTP requests now return a 404 status, indicating that the content has been removed or the host has been taken offline, yet the infrastructure remains observable. VirusTotal analysis shows that 12 of 94 scanning engines flagged the domain as malicious, reinforcing the suspicion of fraudulent activity. The registrar is Name.com, Inc., and the authoritative nameservers are ns1.vercel-dns.com and ns2.vercel-dns.com. The domain appears on three public blocklists and has been actively blocked by PhishDestroy, MetaMask, and SEAL, demonstrating that multiple threat‑intel feeds have recognized it as a threat.

No additional public verdicts such as Safe Browsing or Open Threat Exchange entries were supplied. Given the combination of brand‑specific page title, crypto‑scam classification, and corroborating detections across scanning engines and blocklists, defenders should continue to treat any traffic to home‑pro‑com.zapier.app as hostile. Recommended actions include adding the domain to corporate deny‑lists, monitoring DNS queries for the associated IP address, and ensuring that endpoint protection solutions reference the latest blocklist entries. Analysts should also watch for re‑use of the same hosting infrastructure or similar page titles in future campaigns targeting Kraken or other cryptocurrency platforms.