kra---34---at[.]sbs

This domain, kra---34---at.sbs, presents an elevated risk level as a generic phishing threat, specifically targeting users of the cryptocurrency exchange Kraken. The domain was designed to deceive visitors into divulging sensitive information, such as login credentials or private keys, by mimicking legitimate Kraken login pages. Its status is currently offline, but such domains often reappear under different names, requiring continued vigilance.

PhishDestroy's analysis reveals several technical indicators. VirusTotal shows that 3 out of 95 security vendors flagged this domain as malicious. It was found in 1 threat intelligence pulse on AlienVault OTX and appears on 1 security blocklist. The domain was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED on March 29, 2026, and has since been taken offline. While no specific IP address is available from the data, the registrar and creation date are consistent with other phishing campaigns. The alienvault and blocklist presence further corroborate the threat.

Users who may have encountered this domain should immediately change their Kraken account passwords and enable two-factor authentication if they suspect any credentials were entered. It is also advisable to monitor financial accounts for unauthorized transactions and report any suspicious activity to Kraken's support team. For future protection, users should always verify URLs before entering sensitive information, use a password manager to avoid typo-squatted domains, and consider employing browser extensions that block known phishing sites.