superrare-co.com: Confirmed NFT Marketplace Impersonation

This domain is flagged as a high-risk phishing infrastructure specifically designed to impersonate the legitimate SuperRare NFT marketplace platform. Analysis indicates the site employs brand impersonation tactics to harvest cryptocurrency wallet credentials, likely operating as a crypto drainer to siphon digital assets from victims. The threat type involves deceptive login interfaces mimicking the authentic SuperRare platform, with potential for immediate financial loss upon credential submission. Infrastructure analysis reveals multiple technical indicators confirming malicious intent. The domain superrare-co.com resolves to the IP address 103.227.210.202 and was registered on May 21, 2026, through Cloudflare, Inc. The site employs a Let's Encrypt SSL certificate (YR1) to appear legitimate. Detection metrics show 14 out of 95 security vendors on VirusTotal flagging the domain as malicious. The domain appears on three security blocklists, including those maintained by cryptocurrency security providers, indicating targeted detection within the blockchain security community. The page title SuperRare - Welcome directly matches the legitimate platform's branding, demonstrating clear intent to deceive. Mitigation requires immediate action from both individual users and security teams. Users should verify domain authenticity by checking for the official superrare.com domain and examining SSL certificate details for discrepancies. Cryptocurrency wallet users must enable transaction confirmation prompts and maintain strict separation between wallet credentials and marketplace accounts. Security teams should implement DNS-based blocking for the domain and IP address, while monitoring for similar impersonation patterns involving NFT marketplaces. Given the 2026 registration date anomaly, organizations should investigate potential registrar abuse patterns and consider reporting the domain to relevant abuse contacts for takedown procedures.