slon4at[.]com

This domain is flagged as a high-risk crypto scam specifically targeting the Kraken brand. Registered on February 28, 2026, through NiceNIC International Group Co., Limited, it remains active as of the report date. The page title is 'KRAKEN', indicating direct impersonation of the legitimate cryptocurrency exchange. The domain resolves to IP 188.114.96.3, hosted in the United States on AS13335 (Cloudflare, Inc.), which provides CDN and DDoS protection services, potentially obscuring the true origin server. SSL certificate is issued by Let's Encrypt (E8). HTTP status is 301 (redirect), suggesting the domain may redirect visitors to another malicious or phishing landing page. It appears on one security blocklist and is blocked by PhishDestroy. VirusTotal detection shows 6 out of 93 security vendors flagging the domain as malicious. The trust score from Gridinsoft is 0 out of 100, indicating strong negative reputation. Nameservers are dante.ns.cloudflare.com and mckinley.ns.cloudflare.com, consistent with Cloudflare infrastructure. Defenders should block this domain at the network level, monitor for any related subdomains or IP changes, and alert users to avoid interaction. The exact technical content of the hosted page beyond the title has not been analysed, but the combination of brand impersonation, low trust score, and active redirect strongly supports classification as an active crypto scam site.