kraken-plugins[.]com

This domain kraken-plugins.com has been identified through multiple intelligence sources as conducting brand impersonation of Kraken. Registered on August 29, 2025 through Cloudflare, Inc., the domain remains active on the report date of July 12, 2026 and resolves to IP address 71.210.141.8. The associated SSL certificate originates from Google Trust Services while the recorded page title is Kraken Plugins. Infrastructure analysis reveals deployment of Envoy along with Google Analytics on the site. The threat type is classified as brand impersonation with a high risk level designation.

Detection data shows the domain appears on 2 security blocklists and carries a Gridinsoft trust score of 0/100. VirusTotal indicates flags from 3 out of 95 security vendors. AlienVault OTX has associated the domain with 23 threat intelligence pulses. Blocking entities include PhishDestroy and BLP-Malware. These metrics collectively support the active status and ongoing monitoring requirements for the domain.

Uncertainties persist regarding the exact content hosted because direct webpage examination has not occurred. No additional ASN, country, or kit details are recorded in the available intelligence. Defenders should integrate the domain name, IP 71.210.141.8, and associated indicators into firewall rules and threat feeds. Organizations are advised to review logs for connections to this infrastructure and to issue internal alerts directing users away from kraken-plugins.com until further verification confirms resolution of the impersonation activity.