kraken23-at[.]com

This domain kraken23-at.com is currently active and returns HTTP 200 responses. DNS resolution points to IP 13.248.169.48, which is hosted in the AWS Global Accelerator network located in Canada. The TLS handshake presents a certificate issued by a commercial certificate authority, indicating the site is served over HTTPS. WHOIS data shows registration on March 29 2026 through InlandDomains, LLC. The domain is flagged as a brand‑impersonation of Kraken and is listed on at least one security blocklist; it is also referenced in a single threat‑intelligence pulse. Reputation services assign a trust score of 0 out of 100, and 12 of 94 scanning engines on a malware analysis platform have reported detections. The risk rating is high and the operational status remains active. Observed indicators suggest the infrastructure is leveraging cloud‑based resources to host a malicious site that pretends to be associated with the Kraken brand. Defenders should add the domain and its resolved IP address to deny‑list rules, monitor DNS queries for the domain, and consider sinkholing the IP range if feasible. Continuous re‑evaluation is recommended, as additional detections may emerge.