kra35c[.]cc

PhishDestroy identifies kra35c.cc as an active credential phishing domain posing an elevated risk to users.

This domain was flagged by 6 out of 95 VirusTotal security vendors, indicating significant malicious activity. Registered through NICENIC INTERNATIONAL GROUP CO., LIMITED on March 14, 2025, kra35c.cc resolves to IP address 58.64.137.69. The domain’s recent creation date and low trust scores further corroborate its high-risk status, as it has already begun circulating in multiple threat feeds.

Credential phishing domains like kra35c.cc typically masquerade as legitimate login portals to steal usernames and passwords. Users should avoid interacting with this domain entirely. If accidentally accessed, do not enter any credentials and immediately scan devices for malware. Report the domain to your security provider or browser vendor for blocking. Organizations should add kra35c.cc to network blocklists and warn employees about this emerging threat.