krakengoldrush[.]com

This domain, krakengoldrush.com, was registered on 16 October 2025 through Dynadot LLC and currently resolves to the Cloudflare‑owned address 104.21.4.139, which is located in the United States under ASN 13335. The site presents a page titled “Kraken Gold Rush Slot – Where to Play & Win Big” and is built on a WordPress stack with MySQL, PHP, Cloudflare Browser Insights and HTTP/3 support. The TLS certificate is issued by Google Trust Services (WE1), indicating a legitimate‑looking HTTPS endpoint. Security telemetry shows the domain appears on one public blocklist and is actively blocked by PhishDestroy.

Two of ninety‑five VirusTotal scanners have flagged the site, and Gridinsoft assigns a trust score of zero out of one hundred, confirming a high‑confidence malicious classification. The domain is explicitly identified as impersonating the Kraken brand and is categorized as a crypto‑scam, suggesting attempts to lure victims into fraudulent cryptocurrency‑related activities. The presence of Cloudflare‑provided nameservers (dora.ns.cloudflare.com, ray.ns.cloudflare.com) masks the true backend infrastructure, complicating takedown efforts.

While the HTTP response code is 200 and the page loads successfully, no deeper content analysis is available, leaving the exact user‑facing lure (e.g., fake login, investment prompt) unknown. Defenders should immediately block DNS resolution for krakengoldrush.com and the associated IP 104.21.4.139 at network perimeter devices, add the domain to URL filtering and email security policies, and monitor for outbound connections to the same Cloudflare edge. Continuous threat‑intel feeds should be consulted for any additional indicators of compromise, and any internal logs that reference the domain or its IP should be investigated for potential victimization.