krab1[.]id
“Kraken — официальный даркнет-маркетплейс, закрытая площадка”
Resumen de las pruebas
The domain krab1.id was registered on 2025-12-09 through PT Beon Intermedia and is configured to use the Cloudflare nameservers dell.ns.cloudflare.com and newt.ns.cloudflare.com. DNS resolution points to the IPv6 address 2606:4700:3031::ac43:db78, which belongs to AS13335 Cloudflare, Inc. and is geolocated in the United States. The site’s HTML title reads "Kraken — официальный даркнет‑маркетплейс, закрытая площадка", explicitly referencing the Kraken brand and suggesting a dark‑net marketplace. According to the provided intelligence, the page is classified as a crypto‑scam and employs brand impersonation of Kraken.
The infrastructure appears on a single security blocklist and is currently listed as blocked by PhishDestroy. VirusTotal analysis shows that three out of ninety‑five security vendors have flagged the domain, indicating partial detection. No SSL certificate is presented, and the HTTPS handshake fails, which is consistent with the reported offline status. The risk level is elevated, and the domain is marked as offline at the time of this report (2026-07-24).
Defenders should add krab1.id to network‑level deny lists, monitor the associated Cloudflare IP for any new activity, and consider the registrar PT Beon Intermedia as a potential source of additional malicious domains. Continuous observation of the Cloudflare ASN for similar impersonation campaigns is recommended, as is reviewing any future DNS changes that could reactivate the domain. The lack of a valid TLS certificate and the limited detection footprint suggest a low‑maturity operation, but the explicit brand targeting and cryptocurrency focus warrant heightened vigilance.
Data Coverage
Proceso de respuesta ante amenazas Pipeline
Cobertura de listas de bloqueo
10 fuentes externas supervisadas · instantánea del 11/08/2026
10 fuentes externas supervisadas Sin coincidencias
Cronología de detección
-
Cloudflare Radar
Análisis de Cloudflare Radar almacenado · Abrir análisis
Análisis de VirusTotal
¿Te ha afectado esta página web?
Si ingresó credenciales de cuenta, información personal o de pago, o descargó un archivo de este dominio, tome medidas inmediatas. A continuación encontrará recursos que le ayudarán a informar el incidente y protegerse.
Informa a las autoridades locales
Seleccione su país para obtener contactos oficiales de cibercrimen o crear un borrador de queja →.
Comprobar cualquier dominio
Análisis de amenazas utilizando listas de bloqueo almacenadas, WHOIS, DNS y evidencia de escaneo público
Escanear ahoraDenunciar un intento de phishing
Envía los dominios sospechosos a nuestra base de datos de amenazas: protege a la comunidad
DenunciarFlujo de amenazas en tiempo real
Informes de phishing recientes y cambios de disponibilidad observados
MonitorizarMantente informado, mantente a salvo
Supervisa las amenazas en tiempo real o impugna esta entrada si crees que se trata de un falso positivo.