kra22-at[.]cc

PhishDestroy has identified kra22-at.cc as a generic phishing domain that attempts to impersonate the cryptocurrency exchange Kraken. This domain was registered on March 28, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, and it resolves to IP address 95.85.236.107. It lacks an SSL certificate, which is a common red flag for fraudulent sites designed to steal login credentials or private keys from unsuspecting users.

Technical indicators paint a clear picture of malicious intent. VirusTotal reports that 15 out of 95 security vendors flag this domain, and it appears on one security blocklist. AlienVault OTX has also recorded this domain in one threat intelligence pulse. Despite being created only recently, the domain has already been identified as a threat by multiple sources, and its registration through a relatively obscure registrar adds to its suspicious profile.

The domain is currently offline, which suggests that either the hosting provider or registrar has taken action in response to abuse reports. However, the risk remains elevated because similar domains may still be active or can be quickly registered under slightly different names. Users should always verify the authenticity of any site claiming to be Kraken by visiting the official website directly and never clicking on links from unsolicited emails or messages. PhishDestroy continues to monitor this domain and similar threats to provide timely warnings to the community.