kraken-blog[.]cc

The domain kraken-blog.cc was registered on July 13, 2025 through Gname.com Pte. Ltd. and is currently taken offline as of the reporting date, July 24, 2026. DNS resolution points to the IP address 198.18.1.157 and the authoritative name servers are aria.ns.cloudflare.com and olof.ns.cloudflare.com, indicating the use of Cloudflare’s infrastructure. Technical fingerprinting shows the site employed PHP, enforced HTTP Strict Transport Security (HSTS), and supported HTTP/3, all delivered via Cloudflare’s edge network. The TLS certificate presented was issued by Google Trust Services under the WE1 certificate authority, confirming a valid HTTPS endpoint while the Gridinsoft trust score was recorded at 0 out of 100, suggesting an extremely low reputation.

VirusTotal analysis returned five detections out of ninety‑five scanners, and the domain appears on a single security blocklist, with PhishDestroy confirming the block. The page title returned by the server was "kra05.com," which does not match the brand name but reinforces the presence of unrelated content. The campaign is classified as a crypto scam and is marked as a Kraken impersonation, aligning with the brand target field.

While the offline status limits immediate threat exposure, the infrastructure details—Cloudflare hosting, low trust score, and multiple vendor detections—provide actionable indicators for defenders. Security teams should continue to monitor the IP address 198.18.1.157 for any re‑activation, enforce blocklists that include kraken-blog.cc, and consider adding the domain to internal threat‑intel feeds. Organizations that use Kraken services should remain vigilant for unsolicited communications that reference the domain, even though the site is not presently reachable.