kra28-cc[.]com

This domain, kra28-cc.com, carries an elevated risk level due to its clear attempt at brand impersonation, specifically masquerading as the legitimate cryptocurrency exchange Kraken. The domain's page title, "kra28.cc - Официальный сайт Kraken", is a direct attempt to deceive users into believing they are visiting the official Kraken website. Such impersonation domains are often used in credential theft or crypto drainer campaigns, aiming to harvest login credentials or trick users into transferring funds.

Technical indicators paint a concerning picture. VirusTotal analysis shows 7 out of 95 security vendors flagging this domain as malicious. The domain was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar sometimes associated with suspicious domains. It was created on March 28, 2026, and resolves to IP address 188.114.96.3. The SSL certificate is issued by Google Trust Services / WE1, which may lend a false sense of legitimacy. The domain appears on one security blocklist, and its trust score is low given the impersonation indicators. Fortunately, the domain is currently offline, but it remains a threat if reactivated.

To mitigate risks associated with this brand impersonation threat, users should avoid clicking any links or entering credentials on kra28-cc.com or similar domains. Always verify the URL of the official Kraken website (kraken.com) before logging in. Enable two-factor authentication on your Kraken account and monitor for unauthorized transactions. Report any suspicious domains to Kraken's security team and block the domain at the network level. PhishDestroy recommends adding this domain to your blocklist and educating users about verifying website URLs.