xn--krb3-rzb[.]com

This domain presents an elevated risk due to its clear brand impersonation of Kraken, a well-known cryptocurrency exchange. The threat is specifically a fake login page designed to steal credentials and potentially deploy a crypto drainer, targeting users who mistake the site for the legitimate Kraken platform. The domain was flagged by PhishDestroy and taken offline, but similar variants may appear.

Technical indicators paint a clear picture of malicious intent. VirusTotal flagged the domain with 7 out of 95 security vendors marking it as malicious. The domain was registered through NiceNIC International Group Co., Limited, a registrar often associated with questionable domains. It resolves to IP address 101.99.76.111 and was created on February 21, 2026. The SSL certificate was issued by Let's Encrypt (R13), which is commonly abused by phishers. The page title, "Razer Kraken Blog - Обзоры и новости наушников," is a deceptive attempt to appear as a tech blog while actually hosting a fake Kraken login. The domain appears on one security blocklist.

To stay safe, users should never enter credentials or personal information on this domain. Always verify the URL by checking for official Kraken domains (e.g., kraken.com). Use PhishDestroy to check any suspicious links before clicking. Enable two-factor authentication on all crypto accounts and report any phishing attempts to the appropriate authorities. If you have already entered information on this site, change your passwords immediately and contact Kraken support.