krab4at[.]at

This domain, krab4at.at, is identified as a brand impersonation threat specifically targeting the Kraken cryptocurrency exchange platform. The site mimics the official Kraken interface, likely to deceive users into entering sensitive credentials or transferring digital assets under false pretenses. Analysis of the page title, which displays 'KRAKEN,' confirms the attempt to replicate the legitimate exchange's branding, increasing the likelihood of successful social engineering attacks against unsuspecting victims. Evidence supporting this assessment includes detection by 4 out of 95 security vendors on VirusTotal, indicating a moderate but concerning level of malicious recognition. The domain was registered on February 21, 2026, through Key-Systems GmbH, a registrar known to host both legitimate and malicious infrastructure. It appears on three independent security blocklists, further validating its classification as a threat. Infrastructure analysis reveals the domain resolves to the IP address 188.114.97.3, utilizes Cloudflare for content delivery and DDoS protection, and employs HTTP/3 for enhanced performance—common tactics to evade detection and prolong operational uptime. Users who visited krab4at.at should take immediate action to mitigate potential risks. If any credentials or wallet information were entered, affected individuals must revoke access to all active sessions on the legitimate Kraken platform and enable multi-factor authentication. Cryptocurrency wallet addresses associated with the domain should be treated as compromised, and any transactions initiated through this site should be reported to the exchange and relevant blockchain monitoring services. Additionally, users are advised to scan their devices for malware, as phishing sites may deploy additional payloads or redirect to secondary malicious infrastructure.