public-kraken-auth[.]wstd[.]io

PhishDestroy has identified the domain public-kraken-auth.wstd.io as a brand impersonation phishing site targeting Kraken, a popular cryptocurrency exchange. This domain is currently offline, but it was actively used to deceive users into revealing their login credentials and potentially drain their crypto wallets. The site posed as an official Kraken authentication page, making it a highly convincing fake login portal.

According to intelligence data, the domain was flagged by 12 out of 95 VirusTotal security vendors, indicating broad detection across the security community. It was registered through NameCheap, Inc. on February 21, 2026, and resolved to IP address 104.19.163.34. The site appeared on three security blocklists and was flagged by Google Safe Browsing as a phishing threat. Its SSL certificate was issued by Let's Encrypt (serial E8), which is commonly abused by malicious sites to appear legitimate.

As of the latest check, the domain is offline, meaning the immediate threat has been mitigated. However, users who may have interacted with this site should take precautions: change any passwords used on the fake login, enable two-factor authentication on their Kraken accounts, and monitor for unauthorized transactions. PhishDestroy recommends always verifying the authenticity of any login page by navigating directly to the official Kraken website rather than clicking links in emails or messages. Stay safe and report any suspicious domains to PhishDestroy for analysis.