kraken-gold-rush[.]com

The domain kraken-gold-rush.com is actively hosting a brand impersonation site that leverages the Kraken brand to promote a cryptocurrency‑related gambling scheme. The site returned HTTP 200 and presents a valid SSL certificate issued by Google Trust Services under the WE1 identifier, indicating proper TLS termination through Cloudflare. Registration data shows the domain was created on 16 October 2025 via Dynadot LLC, and the authoritative nameservers are paige.ns.cloudflare.com and will.ns.cloudflare.com, resolving to the Cloudflare edge address 104.21.40.145 located in the United States under AS13335. Technical fingerprints reveal a WordPress stack backed by MySQL and PHP, with traffic accelerated by Cloudflare and delivered over HTTP/3.

The page title "Kraken Gold Rush Slot – Jogue Sem Risco, Ganhe de Verdade" explicitly references a slot‑machine‑style game, consistent with the listed scam type of a crypto scam. Infrastructure analysis shows the domain is listed on at least one public security blocklist and has been flagged by the PhishDestroy service. Reputation scoring is extremely low, with a Gridinsoft trust score of 0 out of 100. VirusTotal scans indicate that 7 of 95 anti‑malware engines flag the domain as malicious, reinforcing the suspicion of fraudulent activity.

MX records include a Cloudflare‑managed host (route2.mx.cloudflare.net), suggesting email services are also routed through the provider, although no evidence of phishing email campaigns has been observed. While concrete payloads or credential‑stealing mechanisms have not been publicly disclosed, the combination of brand impersonation, a gambling‑oriented title, and multiple security detections warrants a high‑risk classification. Defenders should block the domain at DNS and proxy layers, add the IP address 104.21.40.145 to network blocklists, monitor for any related look‑alike domains registered through Dynadot, and educate users about unsolicited offers that claim affiliation with Kraken.