kra7[.]pro

The domain kra7.pro has been identified as a brand impersonation phishing site specifically targeting users of the Kraken cryptocurrency exchange. This domain is now offline, but its recent activity posed a significant threat to unsuspecting visitors. The site was designed to mimic Kraken's login interface, likely aiming to harvest credentials and potentially deploy a crypto drainer to empty victims' wallets.

Technical analysis reveals that kra7.pro was flagged by only 1 out of 95 security vendors on VirusTotal, indicating low visibility in the security community. The domain was registered on November 10, 2025, through Edomains LLC, and resolves to the IP address 104.21.85.29. It appears on 1 security blocklist and has no SSL certificate, which is a red flag for a site claiming to be a secure exchange. The page title was simply "KRAKEN," a clear attempt to deceive users.

Given that the domain is now offline, the immediate threat is mitigated, but users should remain vigilant. PhishDestroy recommends that anyone who may have interacted with kra7.pro change their Kraken passwords immediately and enable two-factor authentication. Always verify the legitimacy of any exchange website by checking the official URL and using trusted sources. For further verification, users can check the PhishDestroy database for ongoing threats and report any suspicious domains.