kraken-rp[.]ru

This domain, kraken-rp.ru, was identified as a crypto scam impersonating the Kraken cryptocurrency exchange platform. Analysis indicates the domain was registered on November 5, 2025, through DOMAINSHOP-RU and is currently offline. The page title, 'Официальный сайт - Кракен Маркетплейс,' directly references Kraken, reinforcing its classification as a brand impersonation threat. Infrastructure analysis reveals the domain resolved to 188.114.97.3, hosted on Cloudflare's network (AS13335) in the US, with nameservers jaime.ns.cloudflare.com and pam.ns.cloudflare.com.

No SSL certificate was detected, increasing the likelihood of interception or tampering during user interactions. Detection data shows the domain was flagged by four of 95 security vendors on VirusTotal and appears on one security blocklist, corroborating its malicious classification. The Gridinsoft trust score of 0/100 further supports its high-risk designation. While the domain is currently offline, defenders should treat any future resolution or reactivation as suspicious.

Historical DNS records and WHOIS data should be preserved for forensic analysis, and security teams are advised to monitor for related domains registered through the same registrar or utilizing Cloudflare nameservers. The absence of SSL and the use of Cloudflare infrastructure are consistent with tactics used to evade detection while maintaining low-cost hosting. No additional phishing kit or payload details are available at this time.