krakenbonusoffers[.]com

Analysis of krakenbonusoffers.com indicates that the domain was registered on 2 November 2025 through Ascio Technologies, Inc. The authoritative nameservers are carioca.ns.cloudflare.com and scott.ns.cloudflare.com, pointing to Cloudflare’s network (ASN 13335) with the resolved address 185.158.133.1 located in Poland. No TLS certificate was observed, meaning the site operated without HTTPS protection. The page title retrieved from the live content before takedown reads “Kraken Referral Code 2025: Claim €10 Free BTC | Verified Code: 7wzr24c5”, explicitly referencing the Kraken brand and offering a cryptocurrency incentive, consistent with the classified crypto‑scam category. The domain appears on a single security blocklist and was flagged by PhishDestroy as offline.

VirusTotal scans recorded six detections out of ninety‑three scanning engines, confirming malicious classification by multiple vendors. Additionally, AlienVault OTX includes the domain in one threat‑intel pulse, providing further corroboration of its malicious intent. The combination of brand impersonation, lack of TLS, Cloudflare hosting, and detection by independent security services suggests a deliberate attempt to lure Kraken users into providing credentials or funds.

Uncertainty remains regarding the exact payload delivered after the initial claim page, as no further forensic artifacts have been collected. Defenders should add krakenbonusoffers.com to blocklists at the DNS and proxy layers, monitor for outbound connections to 185.158.133.1, and enforce strict validation of Kraken‑related communications, including checking for valid TLS certificates and known legitimate Kraken domains. Incident response teams should also review logs for any user interactions with the domain prior to its takedown and consider user education on the risks of unsolicited cryptocurrency offers.