casino-7cc[.]ru

Analysis of casino-7cc.ru, observed on July 25, 2026, shows that the domain is currently offline but was previously active as a brand‑impersonation site targeting the cryptocurrency exchange Kraken. The page title retrieved from the live host listed a series of Russian‑language strings referencing “Кракен официальный сайт” and enumerated multiple secondary domains (kra21.cc, kra21.at, kra22.cc, etc.), indicating a coordinated network of look‑alike URLs. Infrastructure data ties the domain to the UK‑WIN registrar (ASN 42237) and to a hosting provider in Sweden (AS42237 w1n ltd) at IP address 193.105.134.30. No TLS certificate was presented, confirming the absence of HTTPS protection.

DNS queries returned no nameserver records (NS_NOT_FOUND), suggesting either intentional removal or misconfiguration prior to takedown. VirusTotal scans reported three detections out of ninety‑five scanners, and the domain appears on a single public blocklist maintained by PhishDestroy. Gridinsoft assigned a trust score of 0 out of 100, reinforcing the malicious assessment. The listed scam type is “Crypto Gambling,” and the domain explicitly impersonates the Kraken brand.

While the offline status limits real‑time observation, the combination of registrar, hosting, lack of SSL, low trust score, and blocklist inclusion provides sufficient evidence for security teams to flag the domain as a high‑confidence impersonation threat. Defenders should update URL filtering rules to block casino-7cc.ru and any associated Kra subdomains, monitor for future registrations of similar patterns, and advise users to avoid non‑HTTPS links that claim to represent Kraken services. Continuous monitoring of the hosting ASN and the UK‑WIN registrar for new domains is recommended to pre‑empt re‑use of this infrastructure.