# slon3--cc-kraken.ru — MALICIOUS

> slon3--cc-kraken.ru impersonates Kraken to steal credentials. Taken offline after detection. Learn why this domain is risky before visiting.

## Summary
PhishDestroy identifies slon3--cc-kraken.ru as a high-risk brand impersonation domain targeting Kraken users. The domain mimics Kraken's login page under the guise of a mirror site, aiming to harvest user credentials.

This domain was created on March 5, 2026, registered via RU-CENTER-RU, and resolved to IP 188.114.96.3. It was flagged by 10 out of 95 VirusTotal vendors and appeared on two security blocklists, indicating confirmed malicious activity.

Currently, slon3--cc-kraken.ru is offline. Users are advised to avoid interaction with this domain or any similar Kraken mirror sites to prevent credential compromise. Security teams should continue monitoring for related phishing infrastructure.

## Threat Details
- Verdict: MALICIOUS
- Site status: dead (HTTP 403)
- Target brand: Kraken
- Page title: Kraken зеркало slon3 cc, slon4 at. Актуальный вход на Кракен 2026

## Domain Intelligence
- Registered: 2026-03-05 15:07:02
- Registrar: RU-CENTER-RU
- Country: RU
- IP: 188.114.96.3
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: amos.ns.cloudflare.com amos.ns.cloudflare.com. kay.ns.cloudflare.com kay.ns.cloudflare.com.
- SSL Issuer: Let's Encrypt / E8

## Detection Status
- VirusTotal: 10 vendors flagged
  Vendors: ["ChainPatrol", "alphaMountain.ai", "CRDF", "CyRadar", "ESET", "Google Safebrowsing", "Gridinsoft", "Kaspersky", "Lionic", "SOCRadar"]
- Google Safe Browsing: clean
- Blocklists: 2 hits
  Lists: ["PhishDestroy", "MetaMask"]

## Evidence
- Screenshot: https://i.ibb.co/jP1RRJQm/fa4f6ef1a9cd.png
- Cloudflare Radar: https://radar.cloudflare.com/domains/slon3--cc-kraken.ru
- Wayback Machine: https://web.archive.org/web/https://slon3--cc-kraken.ru
- PhishDestroy: https://phishdestroy.io/domain/slon3--cc-kraken.ru/
- LLM endpoint: https://phishdestroy.io/domain/slon3--cc-kraken.ru/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/slon3--cc-kraken.ru/
Last updated: 2026-03-19