kraken4att[.]com

PhishDestroy identifies kraken4att.com as a brand impersonation phishing domain targeting the Kraken cryptocurrency exchange. The site is currently offline, but during its active period it posed a significant threat to users seeking legitimate Kraken services. The domain's title directly claimed to be the official Kraken site for Russia, urging users to use Tor and VPN to access it, indicating a sophisticated social engineering approach.

Technical analysis reveals that the domain was registered on February 21, 2026, through Gname.com Pte. Ltd., and resolved to IP address 188.114.96.3. It was flagged by 16 out of 95 VirusTotal security vendors, placing it in a high-risk category. Additionally, it appeared on one security blocklist. The SSL certificate was issued by Google Trust Services (WE1), which is legitimate, but this does not validate the site's intent—phishers often use valid certificates to appear trustworthy. The domain's creation date is notably recent, a common trait among malicious domains.

Given that the site is now offline, the immediate risk is mitigated, but users should remain vigilant. PhishDestroy recommends that anyone who may have interacted with kraken4att.com change their Kraken account credentials immediately and enable two-factor authentication. Always verify URLs directly from official sources, and never enter sensitive information on sites accessed through unsolicited links or search results. This incident underscores the importance of using bookmarks and official apps for cryptocurrency exchanges.