cryptoz[.]su

The domain cryptoz.su is a phishing site engaged in brand impersonation targeting Kraken, a cryptocurrency exchange. It presents itself as the official Kraken platform to deceive users into entering credentials or sensitive information, posing an elevated risk of financial fraud. No drainer kit was detected, but the site was actively impersonating Kraken before being taken offline.

Technical indicators confirm cryptoz.su as a malicious domain. As of analysis, 1 of 95 VirusTotal security vendors flagged the domain, while Google Safe Browsing did not detect it. The domain appears on 1 security blocklist (PhishDestroy) and was registered through BEGET-SU on February 21, 2026. It resolved to IP address 188.114.97.3, hosted on Cloudflare's infrastructure (AS13335) in the US, and used an SSL certificate issued by Let's Encrypt (E8). The observed page title was 'Kraken: Официальный сайт и зеркала маркетплейса Кракен', reinforcing the impersonation of the Kraken brand. Technologies detected included Nginx, and trust scores from Gridinsoft (0/100) and Scamadviser (29/100) further indicate its fraudulent nature.

Users who interacted with cryptoz.su should immediately change their Kraken account passwords and enable two-factor authentication (2FA) to prevent unauthorized access. Monitor account activity for signs of fraud, such as unauthorized transactions or logins. If cryptocurrency was involved, revoke any token approvals granted to unknown contracts and consider transferring funds to a new wallet. Report the domain to Kraken's security team and submit it to platforms like Google Safe Browsing, PhishTank, or the Anti-Phishing Working Group (APWG) to aid in takedown efforts.