kraken-krab3[.]sbs

The domain kraken-krab3.sbs is identified as a high-risk brand impersonation threat specifically targeting the Kraken cryptocurrency exchange platform. Analysis confirms this domain was actively impersonating Kraken to deceive users into disclosing sensitive account credentials or executing unauthorized transactions. The domain is currently offline, but prior activity indicates a deliberate attempt to exploit the Kraken brand for fraudulent purposes. Infrastructure analysis reveals the domain was registered on December 25, 2025, through Global Domain Group LLC, and resolves to the IP address 186.2.175.37, hosted in Belize under AS59692 (IQWeb FZ-LLC). Security vendors flagged this domain as malicious, with 17 of 95 VirusTotal engines detecting it as a phishing threat. Google Safe Browsing also classified it as phishing, and the domain appears on three distinct security blocklists. Notably, the page title, 'Kraken krab2 - AT-проект загородной недвижимости,' suggests an attempt to obfuscate its true purpose, possibly to evade automated detection systems. The absence of an SSL certificate further indicates a lack of basic security measures, a common red flag in phishing infrastructure. As of the latest assessment, kraken-krab3.sbs has been taken offline, reducing immediate exposure to users. However, the domain's historical activity and technical indicators warrant continued monitoring. Organizations and individuals are advised to block this domain and its associated IP address (186.2.175.37) at the network level. Users who may have interacted with this domain should immediately revoke any active sessions, reset credentials for Kraken and other financial accounts, and enable multi-factor authentication where available. Security teams should review logs for connections to the domain or IP to identify potential compromises. Given the domain's registration date and hosting provider, similar threats may emerge, necessitating heightened vigilance against brand impersonation attempts targeting cryptocurrency platforms.