lubyatinka[.]ru

The domain lubyatinka.ru is a phishing site engaged in brand impersonation targeting Kraken, a cryptocurrency exchange. It posed an elevated risk as a cryptocurrency scam designed to deceive users into disclosing login credentials or transferring funds under false pretenses. As of the latest verification, lubyatinka.ru has been taken offline, though prior activity classified it as an active threat.

Technical indicators confirm lubyatinka.ru as a malicious domain. It was flagged by 2 of 95 security vendors on VirusTotal, including Bfore.Ai PreCrime and SOCRadar. The domain appeared on 1 security blocklist, specifically PhishDestroy. Registered through REGRU-RU on July 28, 2025, lubyatinka.ru resolved to the IP address 186.2.175.37, hosted under AS59692 IQWeb FZ-LLC in Belize. No SSL certificate was present, and the observed page title read 'Kraken krab2 - традиционный любятинка с надёжными AT принципами'. Nameservers were linked to Cloudflare, though no drainer kit was identified.

Users who interacted with lubyatinka.ru should immediately change their Kraken account passwords and enable two-factor authentication to prevent unauthorized access. Monitor account activity for signs of fraud, such as unauthorized transactions or login attempts. If cryptocurrency was transferred, consider moving remaining funds to a new wallet and revoking any token approvals granted during the suspected compromise. Report the domain to Kraken’s security team and file complaints with platforms like Google Safe Browsing, PhishTank, or local cybercrime authorities to aid in takedown efforts.