kerberosmarketlogin[.]com

The domain kerberosmarketlogin.com has been identified as a credential phishing threat, impersonating the Kerberos Market login page to steal user credentials. This attack specifically targets users of the darknet market by presenting a fraudulent login interface. The site was created on May 19, 2026, and registered through Spaceship, Inc., resolving to IP address 104.21.75.189. Its SSL certificate is issued by Google Trust Services (WE1). Notably, VirusTotal reports 0 out of 95 security vendors flagging this domain, indicating it has not yet been widely detected. However, it appears on one security blocklist, suggesting some initial recognition by threat intelligence sources.

As of the latest check, the domain is offline, meaning the hosting provider or registrar may have taken it down, or the attackers have deactivated it. Despite this, the risk remains for users who may have already visited the site or entered credentials. PhishDestroy recommends that anyone who interacted with kerberosmarketlogin.com immediately change their Kerberos Market passwords and enable two-factor authentication. Monitoring for unauthorized account activity is also advised. The combination of low detection rates and a short active window makes this a stealthy but dangerous campaign.