efcopportunities[.]ru

This report details a technical analysis of the domain efcopportunities.ru. The site's page title indicates it is a replica of the "kraken" darknet market, listing multiple mirror domains with the "kra" prefix. The threat posed is impersonation, designed to deceive users into believing they are accessing the legitimate kraken marketplace. This type of site typically aims to harvest credentials or deliver malware by presenting a fraudulent login interface.

Technical evidence shows the domain was flagged by 7 out of 95 VirusTotal vendors, including ADMINUSLabs, alphaMountain.ai, Forcepoint ThreatSeeker, Fortinet, and Lionic. It is hosted on IP address 193.105.134.30, registered under AS42237 w1n ltd in Sweden. The registrar is UK-WIN. No SSL certificate is present, and the nameservers are listed as NS_NOT_FOUND. The domain risk score is 10, with a GridinSoft trust rating of 0 out of 100.

As of the analysis, the domain status is DOWN/OFFLINE. The risk level is high due to the impersonation of a known darknet brand and the presence of multiple vendor detections. Users should avoid any interaction with this domain or its associated mirror addresses.