kraken-dm[.]cc

This domain, kraken-dm.cc, is assessed as an elevated-risk crypto phishing operation targeting the Kraken cryptocurrency exchange brand. Registered on February 21, 2026, through Gname.com Pte. Ltd., the domain was taken offline following detection by security vendors. Infrastructure analysis reveals it resolved to 172.67.193.234, a Cloudflare-hosted IP (AS13335) in the United States, with nameservers aria.ns.cloudflare.com and olof.ns.cloudflare.com. The absence of an SSL certificate further undermines its legitimacy, as secure connections are standard for financial platforms.

The page title, 'Kraken - Функциональные шлюзы и технические указания от инженеров платформы,' suggests a Russian-language impersonation attempt, though the exact content and functionality of the site remain unconfirmed due to its offline status. Five of 95 security vendors on VirusTotal flagged the domain as malicious, and it appears on at least one security blocklist. Gridinsoft assigned a trust score of 0/100, reinforcing its classification as a crypto scam. Defenders should treat this domain as compromised and avoid whitelisting it.

Historical DNS records and Cloudflare logs may provide additional forensic evidence, particularly if tied to other Kraken-themed phishing campaigns. While the domain is currently offline, monitoring for re-emergence under the same infrastructure or registrar is recommended. No evidence links this domain to legitimate Kraken services, and the use of Cloudflare does not imply endorsement by the hosting provider.