clocktimes[.]ru

The domain clocktimes.ru was registered on February 21, 2026 and is currently taken offline. Threat intelligence classifies the site as a crypto scam that impersonates the Kraken exchange, as confirmed by the page title "Как войти на Kraken - все действующие способы подключения" which directly references the target brand. The infrastructure resolves to the IP address 91.236.116.20, located in Sweden and associated with autonomous system AS42237 operated by w1n ltd. An SSL certificate identified as R13 is present, indicating the use of a TLS layer despite the site’s offline status.

The domain has been blocked by the PhishDestroy sinkhole and appears on a single security blocklist, providing early evidence of malicious activity. VirusTotal analysis shows that one out of ninety-three scanning engines flagged the domain, reinforcing the suspicion of phishing or credential harvesting. Although the site is not actively serving content, the combination of brand impersonation, hosting within a known AS, and detection by external security services suggests a deliberate attempt to lure Kraken users into providing login credentials or cryptocurrency information.

Defenders should continue to monitor the IP address for any reactivation, add the domain to internal blocklists, and update web filtering rules to capture any future resolution attempts. Organizations using Kraken services are advised to educate users about the specific Russian-language title and to enforce multi‑factor authentication to mitigate credential‑theft risk. The limited detection footprint—single blocklist entry and one vendor flag—means additional verification may be required, but the concrete indicators present justify a high‑priority remediation posture.