krakenautotrader[.]com

krakenautotrader.com is an active domain that exhibits multiple indicators of a high‑risk crypto brand‑impersonation campaign targeting the Kraken brand. Infrastructure analysis shows the domain resolves to IP 162.159.142.117, an address owned by Cloudflare, Inc. (AS13335) and located in the United States. DNS configuration uses Google Domains name servers (ns‑cloud‑b1/2/3.googledomains.com) and serves a Google Trust Services‑issued TLS certificate, while HTTP responses return status 200 and the page title is reported as “Emergent | Fullstack App”. The site employs Google Cloud services, HSTS, Cloudflare CDN and Cloudflare Browser Insights, indicating a layered hosting approach. Email routing is handled by an Amazon SES endpoint (inbound‑smtp.us‑east‑1.amazonaws.com). Reputation data includes a Gridinsoft trust score of 0/100, detection by 8 of 95 VirusTotal scanners, and listings on three security blocklists (PhishDestroy, MetaMask, SEAL). The domain was registered on 21 February 2026 through Squarespace Domains LLC. Although the exact page content has not been examined, the combination of brand‑targeted classification, crypto‑scam labeling, and the observed infrastructure strongly supports a malicious intent. Defenders should block the domain at network and endpoint layers, monitor DNS queries for the associated IP and name servers, and consider adding the domain to threat‑intel feeds. Ongoing observation is advised to capture any future payload changes or credential‑harvesting activity.