Skip to security report
Domain security and threat intelligence
krakeen.ru favicon

krakeen.ru

“www.krakeen.ru”

Resolved IP
188.114.97.1
Threat verdict Critical
VirusTotal detections: 4/91
OTX: 1 ref Oct 1, 2026 CDN
API
This domain has been flagged as malicious
Security engines reporting a detection: 4. Exercise extreme caution — do not enter credentials or personal information.
VirusTotal
VirusTotal
4 det.
OTX references
URLScan
URLScan
PhishDestroy
DestroyList
Listed

Source evidence

6 sources

VirusTotal

4 / 91

Report

OTX

1 community reference

Report

CF Radar

provider verdict: clean

Report

URLScan capture

stored report

Report

URLScan verdict

Analysis completed

Report

Google Safe Browsing

Checked; no threat flag recorded

Report

Evidence Summary

Critical
VirusTotal
4/91
OTX
1 community ref
URLScan
Stored capture

Assessment

As recorded on 2026-10-01, krakeen.ru was listed in the PhishDestroy internal catalogue. VirusTotal recorded 4 detections across 91 scanners on the same date, which gives a second dated observation for comparison.

Recorded Evidence

The PhishDestroy internal listing for krakeen.ru was recorded on 2026-10-01. VirusTotal recorded 4 detections out of 91 scanners for krakeen.ru on 2026-10-01. OTX recorded 1 pulse for the domain on 2026-10-01. A urlscan report was available for krakeen.ru as checked on 2026-06-21.

Interpretation

The PhishDestroy listing and the VirusTotal result share the 2026-10-01 date, so they describe the same observation window. The urlscan check on 2026-06-21 predates both, meaning any comparison between that report and the later records spans a gap in time. OTX contributes a separate pulse count from the same date as the other two sources.

Recommended Actions

Retain the dated records for krakeen.ru, including the PhishDestroy listing, the VirusTotal result, the OTX pulse and the urlscan report, so later checks can be compared against them. When reviewing krakeen.ru again, note the date of each new observation and compare it with the existing entries rather than treating any single record as current. Avoid submitting passwords, tokens or other sensitive information while examining krakeen.ru.

Detection-evasion analysis

Cloaking and traffic-distribution check

Not yet scanned No crawler-versus-browser difference has been recorded yet

Stored crawler-versus-browser observations for this host, plus a live fingerprint check for Keitaro-style traffic distribution systems.

Stored cloaking flag
Not yet scanned
Last cloaking scan

Scanner note: timeout: raw=timeout; http=0; via=http_proxy; error=HTTPConnectionPool(host='104.253.77.144', port=5566): Read timed out. (read timeout=7)

Live TDS fingerprint check
Seven Keitaro fingerprints plus a crawler-versus-browser comparison, run from the PhishDestroy scanner when this panel is open.
Waiting

Stored Capture · 1 capture

Domain details

Domain
URLScan Verdict Analysis completed score 0 report ↗
IP Context Cloudflare shared edge origin IP hidden Edge-IP reputation is not attributed to this domain.
OTX Tags blocklistcryptodrainerfraudphishdestroyphishingscam
Technical detailsProvenance & timestamps
First DetectedOct 1, 2026
Submitted URLhttp://krakeen.ru/
Page Title
www.krakeen.ru

Network & certificates

Stored technical evidence

Network & DNS

Shared CDN edge
Resolved IP
188.114.97.1
Network ASN
AS13335
Organization
CloudFlare, Inc.
Observed location
Toronto, CA

Edge-IP reputation is not attributed to this domain.

Location describes the IP network.

viewdns.info · 188.114.97.1rapiddns.io

Latest Classified Outcome 2026-10-03 10:15:49 UTC

Primary outcome Unknown reason: Probe Inconclusive 20% confidence
Attribution source: Current Http Probe
Evidence layers Availability: Unreachable Content: Unknown DNS: Resolved Registration: Unknown
Latest HTTP observation Unknown Probe Inconclusive 20% 2026-10-03 10:15:49 UTC
RDAP registration Unknown
Availability, content, DNS and registration are independent evidence layers. NXDOMAIN, an unreachable origin or missing content alone does not prove registrar action. A registrar or provider is credited only when a direct technical marker identifies that actor. Report causality is shown separately.
Technologies · 2 identified
Detected via Cloudflare Radar · Wappalyzer engine
Report This Domain Submit evidence & help protect others

VirusTotal Analysis

4 / 91 security vendors flagged this domain
View on VT
Last analyzed Previous stored snapshot: 4 detections
alphaMountain.ai
Chong Lua Dao
Fortinet
Gridinsoft

Forensic History & Detection Timeline

ThreatLifecycleTelemetry
This timeline displays historical security and status checkpoints observed by the PhishDestroy automated monitoring network. It records domain lifecycle updates, scanner changes, and threat telemetry over time.
  1. Threat First Observed 2026-10-01 02:26:44 UTC
    Domain ingestion complete. Initial state is marked as unknown pointing to IP 188.114.97.1.

Threat Response Pipeline

Discovery
Analysis
Monitoring

8 recorded events. These records describe collected evidence, outgoing notifications and publication; they do not confirm a complete investigation or a takedown.

Evidence & External Reports

Deep Analysis

Were You Affected by This Site?

If credentials were compromised, report immediately. Do not engage with recovery scammers.

If credentials, payment data, or files were exposed, report the incident immediately. Change affected passwords, revoke active sessions, and scan the device.

Europol
Find the official reporting channel for your EU country
National police directory
Beware of recovery scammers! Recovery scammers may pose as investigators, lawyers, or tracing services. Do not pay upfront fees or disclose credentials. Learn more about recovery fraud →

Report to Your Local Authorities

Select your country to get official cybercrime contacts, or create a complaint draft →.

97-country directory

Template-based draft · optional AI wording assistance requires separate consent

Template-based draft • optional AI wording assistance requires separate consent · Review and submit it yourself

Check Any Domain

Threat analysis using stored blocklist, WHOIS, DNS, and public scan evidence

Scan Now

Report Phishing

Submit suspicious domains to our threat database — protect the community

Report

Live Threat Feed

Recent phishing reports and observed availability changes

Monitor

Stay Informed, Stay Safe

Monitor live threats or contest this listing if you believe it's a false positive

Live Threat Feed Appeal This Listing
HTML · IFRAME

Embed This Report

Share this threat intelligence on your website or blog

embed.html
<iframe
  src="https://phishdestroy.io/embed/domain/krakeen.ru"
  title="PhishDestroy threat report for krakeen.ru"
  width="100%" height="320"
  loading="lazy"
  referrerpolicy="no-referrer"
  sandbox="allow-same-origin allow-popups allow-popups-to-escape-sandbox"
  style="border:0;border-radius:12px;max-width:100%"
></iframe>