ofc[.]baudokraken[.]com

Analysis of ofc.baudokraken.com shows a newly registered domain (creation date 03 Oct 2025) that targets the Kraken brand through a crypto‑scam impersonation pattern. The domain resolves to 188.114.96.3, an address owned by Cloudflare (AS13335) located in the United States. No TLS certificate is presented, indicating the site is served over plain HTTP or that the certificate was deliberately omitted to avoid detection. The page title returned by the server is "Loading...", which provides no substantive content and suggests that the page may be dynamically generated or that the content was removed before the current scan. The registrar listed for the domain is HOSTINGER operations, UAB, a common provider for short‑lived malicious registrations.

Nameserver configuration includes brit.ns.cloudflare.com, jonah.ns.cloudflare.com, sterling.ns.cloudflare.com, and yoland, all Cloudflare‑managed, reinforcing the use of a reputable CDN to obscure the true origin of the payload. Gridinsoft assigns a trust score of 0/100, reflecting a complete lack of confidence in the domain's legitimacy. VirusTotal records indicate that 7 of 95 scanned security vendors flagged the domain, confirming a consensus of malicious intent without specifying the exact detection signatures. The domain is currently listed on a single public blocklist and has been taken offline by the PhishDestroy sinkhole, confirming that active mitigation measures have been applied. Defenders should update inbound and outbound filtering policies to block any traffic to ofc.baudokraken.com and to the associated IP address 188.114.96.3.

Monitoring of Cloudflare‑hosted IP ranges for unexpected traffic spikes may help detect related infrastructure reuse. Because the site currently returns only a generic title and no SSL, any future re‑activation could involve a more sophisticated phishing page; continuous re‑scanning is advised.