krab5-kraken[.]ru

This report details the threat posed by the domain krab5-kraken.ru. The site's page title, "krab4 cc официальное зеркало сайта Кракен | Kraken onion tor 2026," indicates it claims to be an official mirror or alternative access point for the "Kraken" onion service. Despite the page title, the available data shows the site impersonates the brand "facebook" and is classified as a social media scam. The primary threat is that visitors may be deceived into entering login credentials or personal information, believing they are accessing a legitimate service, leading to account compromise or identity theft.

Technical evidence confirms the malicious nature of this domain. VirusTotal analysis shows 8 out of 95 vendors flagged it as malicious. It is blocked by Google Safe Browsing for SOCIAL_ENGINEERING and appears on three blocklists. The domain was registered on 2026-02-21 through registrar RU-CENTER-RU. It resolves to IP address 104.21.43.64, hosted in the United States by Cloudflare, Inc. (AS13335). The site lacks an SSL certificate. Nameservers are amos.ns.cloudflare.com and kay.ns.cloudflare.com.

As of the current assessment, krab5-kraken.ru is offline and non-responsive. The domain risk score is 10, the highest possible rating. The combination of a high detection rate, active blocklisting, and lack of SSL strongly indicates a high-risk, malicious domain intended for credential theft via social engineering. Users should avoid any interaction with this domain.