cms[.]krakenmedia[.]com

This domain, cms.krakenmedia.com, was registered on 21 Feb 2026 through Dynadot LLC and resolves to the Amazon‑owned IP 3.233.30.191 (AS14618, United States). The host serves an HTTP 200 response without TLS; the page title returned is “KrakenMedia.com for sale”, indicating a possible domain‑parking or resale page rather than a functional phishing login. The site is flagged as a high‑risk brand‑impersonation of Kraken and is classified as a crypto‑scam. Infrastructure analysis shows the domain is listed on a single security blocklist and has been blocked by PhishDestroy. Reputation services report a Gridinsoft trust score of 0/100 and 11 of 93 VirusTotal scanners have raised detections. Nameservers are ns1.namepros‑dns.com and ns2.abdulbasit.ns.namepros‑dns.is. Defenders should immediately block both the domain and the IP address at perimeter defenses. Because the IP belongs to a large cloud provider, consider implementing host‑based allowlists that restrict outbound connections to this address. Continuous monitoring of DNS queries for the domain and its parent zone is advised, as the attacker may reuse the same infrastructure for additional malicious sites. Update intrusion‑detection signatures to flag HTTP traffic to this host, and add the domain to threat‑intel feeds used by email and web filters. Given the limited visibility into the site’s content, further analysis of the HTTP response body and any subsequent redirects is recommended to determine whether credential‑harvesting or malware delivery is present.