kraken[.]tortuga-sochi[.]ru

Analysis conducted on July 24, 2026 indicates that the domain kraken.tortuga-sochi.ru was created on August 2, 2025 and is currently offline. The domain is registered through the Russian registrar REGRU-RU and resolves to IP 193.105.134.30, which is allocated to AS42237 w1n ltd in Sweden. No SSL certificate is presented, meaning the site would have been served over plain HTTP if it were reachable. The page title observed before takedown reads "Кракен krab1 - AT дом вашей мечты под ключ", which references the Kraken brand and includes Russian text suggesting a service offering. Google Safe Browsing flags the domain for social engineering, and VirusTotal reports that nine of ninety‑five scanning engines flagged the domain as malicious, indicating a non‑trivial detection rate.

The domain appears on a single security blocklist and is blocked by PhishDestroy, further corroborating its malicious intent. Gridinsoft assigns a trust score of 0 out of 100, the lowest possible rating, reflecting extreme suspicion. The listed scam type is a crypto scam, and the threat category is brand impersonation targeting the cryptocurrency exchange Kraken. Because the site is offline, active content analysis is not possible, and the exact phishing or credential‑harvesting mechanisms remain unknown.

Defenders should add kraken.tortuga-sochi.ru to deny‑list rules across DNS filters, firewalls, and proxy solutions, and should also consider blocking the associated IP address 193.105.134.30 and its host AS42237 to pre‑empt possible reuse. Monitoring of the registrar REGRU‑RU for new domains containing the Kraken keyword, as well as vigilance for similar page titles or Russian‑language variants, is advised. Continuous re‑scanning of the domain when it reappears online is recommended to capture any changes in payload or infrastructure. Until further evidence emerges, the domain should be treated as a confirmed crypto‑related impersonation threat with elevated risk.