kra41c[.]cc

PhishDestroy has identified kra41c.cc as a fraudulent domain designed to impersonate the Kraken cryptocurrency exchange. The site presents a login interface that mimics the legitimate Kraken platform, tricking users into entering their usernames, passwords, and potentially two-factor authentication codes. This is a classic credential harvesting attack, and any information submitted is sent directly to the attackers. The domain is currently offline, but similar variants may appear.

The evidence against kra41c.cc is strong. VirusTotal reports that 7 out of 95 security vendors flag this domain as malicious. The domain was created on March 26, 2026, through the registrar NICENIC INTERNATIONAL GROUP CO., LIMITED, which is known for hosting suspicious domains. It was hosted on IP 188.114.96.3 and used an SSL certificate issued by Google Trust Services, which can give a false sense of security. The domain also appears on one security blocklist, confirming its malicious intent.

If you visited kra41c.cc and entered any login credentials, you should immediately change your Kraken password and enable two-factor authentication if not already active. Also, contact Kraken support to secure your account. Monitor your accounts for any unauthorized activity. Always verify the URL of any crypto exchange before logging in, and use PhishDestroy to check suspicious links before clicking. Stay safe online.