kra-40[.]com

PhishDestroy has identified kra-40.com as a confirmed phishing domain targeting users of the Kraken marketplace. The site, which resolves to IP 188.114.97.3, was created on March 27, 2026, and registered through NICENIC INTERNATIONAL GROUP CO., LIMITED. Its page title, "Kra40.cc | Kra40 сс — доступ к Kraken маркетплейсу," explicitly mimics the legitimate Kraken platform to deceive visitors into disclosing sensitive information or credentials. This domain poses a significant threat due to its deceptive branding and intent to harvest user data.

Technical analysis reveals several red flags: VirusTotal reports 2 out of 95 security vendors flagging the domain as malicious, and AlienVault OTX has recorded it in one threat intelligence pulse. The SSL certificate was issued by Google Trust Services (WE1), and the domain currently appears on one security blocklist. Despite these indicators, the site is now offline, suggesting that takedown actions have been successfully executed. The combination of a recently created domain, a suspicious registrar, and low detection rates underscores the importance of proactive monitoring.

As of the latest assessment, kra-40.com is no longer accessible, mitigating the immediate risk of credential theft. However, users who may have interacted with the site should change their passwords and monitor accounts for unauthorized activity. PhishDestroy recommends that all users verify URLs carefully before entering personal information, especially when directed to cryptocurrency or marketplace platforms. Continued vigilance is advised as similar domains may emerge under different variations of the Kraken brand.