kraken-krab10[.]ru

kraken-krab10.ru was created on 24 December 2025 and is registered through REGRU‑RU. The site resolves to the IPv4 address 186.2.175.37, which belongs to AS59692 (IQWeb FZ‑LLC) located in Belarus. No TLS certificate is presented, indicating that the service is delivered over plain HTTP. The page title returned from the host is “Kraken krab2 – AT‑платформа математических решений”, and the domain is classified as a crypto‑scam that impersonates the Kraken brand. VirusTotal reports that 11 of 93 scanning engines flagged the domain as malicious.

The domain is listed on a single security blocklist and has been actively blocked by the PhishDestroy service. Gridinsoft assigns a trust score of 0 out of 100. Nameserver records point to Cloudflare: ganz.ns.cloudflare.com and pola.ns.cloudflare.com. The current operational status is offline, and the site has been taken down. Analysis indicates that the infrastructure is typical of low‑cost brand‑impersonation campaigns: a recently registered domain, shared hosting in a known hosting ASN, and the use of Cloudflare DNS to obscure origin.

The lack of an SSL certificate and the low trust score further corroborate malicious intent. However, the exact content of the page, any credential‑harvesting forms, or malicious payloads have not been captured, leaving the precise attack vector uncertain. Defenders should add 186.2.175.37 to network blocklists, deny DNS resolution for kraken-krab10.ru, and continue monitoring for any resurgence of the domain or related sub‑domains. Organizations that use Kraken services should educate users about the absence of HTTPS and the misleading page title, and enforce strict verification of legitimate Kraken URLs. Ongoing threat‑intel feeds should be consulted for updates, and any future sightings should be correlated with the observed registrar and hosting details.