kra19cc[.]com

PhishDestroy identifies kra19cc.com as an active generic phishing domain leveraging deceptive login pages to harvest user credentials. The domain does not impersonate a specific brand but instead relies on generic lures to trick victims into submitting sensitive information. No evidence of a drainer kit or targeted brand imitation is currently associated with this infrastructure, though the generic nature increases its risk of successful deception.

This domain was flagged by 4 out of 95 security vendors on VirusTotal, indicating limited but present detection coverage. It is registered through ChocolateChipDomains, LLC, with the domain creation date set to November 20, 2025. The infrastructure resolves to IP address 76.223.54.146 and is secured with an SSL certificate issued by GoDaddy.com, Inc. Despite its recent creation, kra19cc.com remains unblocked by Google Safe Browsing and has not been listed on major threat intelligence feeds at this time.

At this time, kra19cc.com remains active and poses an elevated risk to users who may encounter it through phishing emails, social media links, or malicious advertisements. Immediate network-level blocking of the domain and IP address 76.223.54.146 is strongly recommended. Users should avoid interacting with the site, refrain from entering any credentials, and report the domain to their security teams. While detection rates are currently low, proactive blocking and user awareness remain the most effective defenses against this threat. Residual risk will persist until the domain is widely blacklisted or the hosting infrastructure is taken down.