m-kraken[.]com

Analysis of the domain m-kraken.com shows a high‑risk brand impersonation campaign targeting Kraken users. The site was registered on February 21, 2026 through Squarespace Domains LLC and resolves to the IP address 198.185.159.144, which belongs to AS53831 Squarespace, Inc. in the United States. Technical fingerprints indicate the use of Squarespace Commerce and Squarespace platforms, with HTTP Strict Transport Security enabled, but no SSL certificate is presented, leaving the connection unencrypted. The only visible page element is the title "Coming Soon," and the domain is currently taken offline, preventing real‑time content inspection.

VirusTotal scans have recorded 16 detections out of 93 security vendors, corroborating malicious intent. Google Safe Browsing flags the domain for social engineering, and it appears on three independent security blocklists. Additional blocklist providers—including PhishDestroy, MetaMask, and SEAL—have also listed the domain, reinforcing the assessment of a crypto‑related scam.

While the exact phishing kit or credential‑harvesting page cannot be confirmed due to the offline status, the convergence of vendor detections, blocklist listings, and the explicit impersonation of the Kraken brand provides strong evidence of a crypto scam. Defenders should continue to block the domain at network perimeter devices, update URL filtering feeds with the observed indicators, and monitor for any re‑hosting attempts that may reuse the same Squarespace infrastructure. Ongoing observation of the IP range and associated Squarespace domains is recommended to detect potential repurposing for future impersonation campaigns.