kraken24web[.]com

This domain, kraken24web.com, is flagged as an active brand impersonation threat targeting Kraken, a well-known cryptocurrency exchange. Registered on March 27, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, the domain resolves to IP address 172.67.166.64, hosted on infrastructure associated with Cloudflare, Inc. in Canada. The page title, 'KRAKEN web,' directly references the targeted brand, and the domain is classified under scam type 'Brand Impersonation.' Infrastructure analysis reveals the use of Cloudflare nameservers (miguel.ns.cloudflare.com and raquel.ns.cloudflare.com) and technologies including Cloudflare Browser Insights and HTTP/3. The domain currently returns an HTTP 301 redirect status, indicating it may be actively rerouting traffic to another location. A Google Trust Services SSL certificate (WE1) is in place, which, while providing encryption, does not validate the legitimacy of the site. Security vendor assessments indicate low trust, with a Gridinsoft trust score of 0/100. The domain appears on at least one security blocklist and has been flagged by two of 94 vendors in a recent scan. While the exact content of the site has not been analyzed, the combination of brand impersonation, recent registration, and low trust scores suggests malicious intent. Defenders should treat this domain as high-risk and implement blocking measures at the DNS or network level to prevent user exposure. Further investigation into associated IPs, redirects, and any linked infrastructure is recommended to identify additional threat vectors.