kra28-at[.]cc

kra28-at.cc is a generic phishing domain that has been flagged by 7 out of 94 vendors on VirusTotal as malicious. Despite its takedown status, the domain's initial detection by PhishDestroy on 2026-03-27 highlights its potential threat during its brief period of activity. Registered through NICENIC INTERNATIONAL GROUP CO., LIMITED, the domain was hosted on an IP address managed by Cloudflare in Canada.

The domain's SSL certificate was issued by Google Trust Services, which is commonly trusted, potentially misleading victims into believing the site was legitimate. kra28-at.cc's platform risk score of 63 out of 100 indicates a moderate level of threat, suggesting that it was actively targeting users during its operational phase. The presence of the domain on PhishDestroy's blocklist further underscores its malicious intent.

Phishing domains like kra28-at.cc often exploit the time gap between domain registration and detection by antivirus databases, which can range from 24 to 72 hours. PhishDestroy's detection pipeline operates upstream of traditional AV vendors, allowing it to identify threats in this critical window. This proactive approach ensures threats are identified before they can cause widespread harm, as evidenced by the swift detection and subsequent takedown of kra28-at.cc.