xn--kr43-rzb[.]com

The domain xn--kr43-rzb.com has been identified as a brand impersonation threat specifically targeting Kraken, a well-known cryptocurrency exchange. This domain is currently offline, but its malicious intent was confirmed through multiple security indicators. The site was designed to deceive users into believing it was associated with Kraken, potentially to steal sensitive information or cryptocurrency assets.

Technical analysis reveals that xn--kr43-rzb.com was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED and created on March 27, 2026. It resolves to IP address 172.67.150.241 and appears on at least one security blocklist. VirusTotal flags this domain with 9 out of 95 security vendors detecting it as malicious, and AlienVault OTX lists it in one threat intelligence pulse. The SSL certificate was issued by Let's Encrypt (E7), and the page title read "Kraken Audio — Премиальные наушники," suggesting an attempt to impersonate a Kraken-related audio product.

Given that this domain is now offline, users should remain vigilant against similar threats. PhishDestroy recommends verifying any unexpected communications or websites claiming to be from Kraken by using official channels. Always double-check URLs, avoid clicking on unsolicited links, and report suspicious domains to security platforms. The risk level was elevated due to the brand impersonation and the domain's short-lived active period, but its takedown reduces immediate danger.