kraken-link-2025[.]ru

Analysis indicates that the domain kraken-link-2025.ru was registered on February 21, 2026 through RU-CENTER-RU and is hosted on Cloudflare infrastructure (AS13335) with the IP address 188.114.97.3 located in the United States. The domain resolves to Cloudflare nameservers grant.ns.cloudflare.com and lola.ns.cloudflare.com, confirming the use of Cloudflare’s DNS service. No TLS certificate is presented, and HTTP requests return a 404 Not Found page title, suggesting the site is currently inaccessible. Threat intelligence flags the domain as a crypto‑related impersonation of the Kraken exchange; the brand target is explicitly listed as Kraken and the scam type is identified as a crypto scam.

VirusTotal has recorded detections from eight of ninety‑three scanning engines, and the domain appears on three security blocklists. It is also listed as blocked by PhishDestroy, MetaMask, and SEAL, indicating that multiple anti‑phishing and wallet protection services have taken action. Gridinsoft assigns a trust score of zero out of one hundred, reinforcing the malicious assessment. Evidence does not disclose the specific payload, phishing kit, or any observed credential harvesting page, and the current offline status prevents real‑time verification of malicious content.

Consequently, the exact operational capabilities remain uncertain, but the combination of brand impersonation, low trust score, multiple vendor detections, and blocklist listings establishes a high likelihood of malicious intent aimed at deceiving Kraken users. Defenders should add the domain and its IP address to internal blocklists, monitor DNS queries for lookups to the listed Cloudflare nameservers, and ensure that endpoint security solutions incorporate the eight VirusTotal detections. Network‑level controls that restrict outbound connections to unknown Cloudflare‑hosted domains may reduce exposure.