Notification and current-status evidence
The sent-report ledger records the first outgoing report at .
The recorded recipient is abuse@ti.ru.
The latest stored availability evidence still shows the domain reachable; 4 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
kraken-proxy-server1[.]wepromo[.]ru
“Kraken Proxy - Панель управления”
kraken-proxy-server1.wepromo.ru — Não verificado. Representação da marca: Kraken; Tipo de golpe: Brand Impersonation. Resumo das evidências: VirusTotal 5/91 (ChainPatrol, alphaMountain.ai, Chong Lua Dao, Gridinsoft, SOCRadar); 2 external blocklist matches (MetaMask, SEAL); PhishDestroy score 66/100. Registrador: REGRU-RU.
A análise detalhada do PhishDestroy AI permanece em inglês para preservar o registro forense original.
kraken-proxy-server1.wepromo.ru has been identified as a confirmed brand impersonation site specifically targeting the Kraken cryptocurrency exchange. The domain was created on March 27, 2026, and is currently offline, but its recent activity and structure indicate a clear intent to deceive users into believing they are accessing a legitimate Kraken proxy service. The page title, 'Kraken Proxy - Панель управления,' is designed to mimic a control panel for a proxy service, likely to harvest login credentials or private keys from unsuspecting users.
Technical indicators reveal that this domain resolves to IP address 79.111.119.153 and is registered with REGRU-RU, a Russian registrar. It appears on three security blocklists and has been flagged by 1 out of 95 VirusTotal vendors, indicating low but present detection. The SSL certificate is issued by Let's Encrypt with fingerprint E8, which is common for fraudulent sites due to its free and automated issuance. Despite its low detection rate, the domain's specific impersonation of Kraken and its recent registration date are strong red flags.
The current status of kraken-proxy-server1.wepromo.ru is offline, which may indicate that it has been taken down or is temporarily inaccessible. However, users should remain vigilant as similar domains may appear. PhishDestroy strongly advises against visiting this domain or any related URLs. Always verify the authenticity of Kraken services by using official channels and bookmarks. If you have interacted with this site, change your passwords immediately and enable two-factor authentication on your accounts.
Pipeline de resposta a ameaças
Status da lista de bloqueios pública
Análise do VirusTotal
Análise de desempenho do site
Google PageSpeed Insights — mobile performance audit of kraken-proxy-server1.wepromo.ru · checked Mar 28, 2026
Evidências e relatórios externos
PD-20260327-28EAE4 Recipient: abuse@ti.ru Você foi afetado por este site?
Se você inseriu credenciais de conta, informações pessoais ou de pagamento, ou baixou um arquivo deste domínio, tome medidas imediatas. Abaixo estão os recursos para ajudá-lo a relatar o incidente e se proteger.
Notifique as autoridades locais
Selecione seu país para obter contactos oficiais do cibercrime ou crie um rascunho de reclamação →.
Verificar qualquer domínio
Análise de ameaças usando lista de bloqueio armazenada, WHOIS, DNS e evidências de verificação pública
Digitalize agoraDenunciar phishing
Envie domínios suspeitos para nosso banco de dados de ameaças — proteja a comunidade
DenunciarFeed de ameaças em tempo real
Relatórios recentes de phishing e alterações de disponibilidade observadas
MonitorarMantenha-se informado, mantenha-se seguro
Monitore ameaças em tempo real ou conteste esta listagem caso acredite que se trate de um falso positivo