kraken[.]znachenie-na-chasah[.]ru

The domain kraken.znachenie-na-chasah.ru was registered on 24 December 2024 through the REGRU‑RU registrar and is currently offline. Infrastructure analysis shows it resolves to the IPv4 address 91.236.116.20, which is announced by ASN 42237 belonging to w1n ltd in Sweden. The domain uses the public name servers ns1.armadns.com and ns2.armadns.com, and no TLS certificate is presented, indicating the site operates without HTTPS protection. The page title returned from the last known HTTP response is "Кракен - премиум AT‑сервис доставки грузов", a literal translation that references a premium transport service rather than the cryptocurrency exchange Kraken, confirming a brand‑impersonation motive.

VirusTotal records indicate that three of ninety‑five scanning engines flagged the domain, and Google Safe Browsing has classified the site as a social‑engineering threat. The domain appears on a single external blocklist, PhishDestroy, which has already taken it down. Gridinsoft’s proprietary trust score rates the domain at 0 out of 100, reinforcing the malicious assessment.

The observable evidence points to a crypto‑related scam that attempts to exploit the Kraken brand, but the exact payload or user‑interaction flow has not been captured because the site is no longer reachable. Analysts should continue to monitor the associated IP address and name‑server pair for re‑use, block the domain and its IP at network perimeters, and add the domain to internal threat‑intel feeds. Because the site is offline, further forensic collection is limited; however, the combination of brand impersonation, social‑engineering flag, and low trust score warrants elevated vigilance for any future infrastructure that re‑uses the same registrar, hosting provider, or IP range.