kraken128rockstar[.]pages[.]dev

Analysis of the domain kraken128rockstar.pages.dev indicates a brand impersonation scheme targeting Kraken, a cryptocurrency exchange. The domain, registered on February 21, 2026, was hosted on Cloudflare infrastructure and resolved to the IP address 172.66.44.141, located in the United States under AS13335 (Cloudflare, Inc.). The page title, 'KRAKEN128 | Situs Slot Gacor Thailand Resmi & Aman,' suggests an attempt to lure users with promises of secure or official online gambling services, though the exact content and functionality of the site remain unconfirmed. No SSL certificate was detected, increasing the risk of unencrypted data transmission.

The domain was flagged by five out of ninety-three security vendors on VirusTotal, indicating moderate detection but not universal consensus. It also appeared on at least one security blocklist, further supporting its classification as a threat. The scam type is explicitly identified as a crypto scam, aligning with the impersonation of Kraken. Defenders should note that the domain is currently offline, though its infrastructure and registration details remain relevant for retrospective analysis.

Organizations are advised to block the domain and its associated IP address in network security controls. Given the use of Cloudflare hosting, defenders should monitor for similar domains leveraging the same infrastructure. The absence of an SSL certificate and the presence of gambling-related keywords in the page title may serve as additional indicators for future threat hunting. While the domain is inactive, its registration date and detection history suggest it was operational long enough to pose a risk, warranting continued vigilance.