kra-29-cc[.]com

This domain, kra-29-cc.com, was set up to trick people into thinking they are logging into their Kraken cryptocurrency exchange account. In reality, it is a phishing site that captures usernames, passwords, and possibly two-factor authentication codes, giving scammers full access to victims' funds. The page title even includes a reference to another suspicious domain, krab9.cc, which suggests an organized network of fraudulent sites.

PhishDestroy identified this threat through multiple signals. The domain was registered on March 27, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar often associated with low-quality or malicious domains. VirusTotal analysis shows 3 out of 95 security vendors flagging the site as malicious, and it already appears on one security blocklist. The SSL certificate is issued by Google Trust Services, which is legitimate but does not guarantee the site itself is safe—scammers can easily obtain certificates. The domain resolves to IP 104.21.75.40, which is linked to Cloudflare, a common service used to hide the true hosting location.

If you visited kra-29-cc.com and entered any login credentials, change your Kraken password immediately and enable two-factor authentication if you haven't already. Also, contact Kraken support to secure your account. Run a full antivirus scan on your device to check for any malware. Remember, always double-check the URL before logging in and use bookmarks for important sites. For more details on this and other scams, visit PhishDestroy's database.