kraken-krab1-at[.]ru

Analysis of the domain kraken-krab1-at.ru confirms its classification as a crypto scam site impersonating the cryptocurrency exchange Kraken. The domain was registered on December 24, 2025, through RU-CENTER-RU, a registrar commonly associated with high-risk domains. Infrastructure analysis reveals the domain resolves to the IP address 188.114.97.3, hosted on Cloudflare's network (AS13335) in the United States. The domain utilizes Cloudflare nameservers, specifically dax.ns.cloudflare.com and magdalena.ns.cloudflare.com, which is consistent with tactics used to obscure hosting origins and evade takedowns. The page title, 'Kraken зеркало официальное.

Kraken ссылка в даркнете 2026,' explicitly references Kraken and promotes the domain as an official mirror or darknet link, a common phishing tactic to deceive users into believing the site is legitimate. No SSL certificate was detected, increasing the risk of unencrypted data transmission. The domain has been flagged by at least one security blocklist, and two out of 93 security vendors on VirusTotal have identified it as malicious, though the limited detection count suggests it may still be evading broader scrutiny. Gridinsoft assigns the domain a trust score of 0/100, indicating a high-risk classification.

The domain is currently offline, likely due to takedown efforts by security vendors such as PhishDestroy. Defenders should treat this domain as a confirmed threat and block it at the network level. Organizations targeting Kraken users should monitor for similar domains registered through RU-CENTER-RU or utilizing Cloudflare infrastructure, as these patterns are frequently observed in phishing campaigns. Further investigation into the hosting IP and associated domains may reveal additional malicious infrastructure.