kra------34---cc[.]sbs

PhishDestroy assesses kra------34---cc.sbs at an elevated risk level due to its classification as a generic phishing domain. This domain was created on March 29, 2026, and registered through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar often associated with malicious registrations. It resolves to IP address 193.105.134.22, which has been observed in one AlienVault OTX threat intelligence pulse and appears on one security blocklist. VirusTotal analysis shows that 6 out of 95 security vendors flag this domain as malicious. The SSL certificate is issued to Internet Widgits Pty Ltd, a placeholder entity commonly used in phishing operations. The page title, "Welcome to nginx!", suggests the domain may be hosting a phishing page disguised as a legitimate nginx default landing page. Fortunately, the domain is currently offline, reducing immediate risk.

Given that this is a generic phishing threat, users who may have encountered the domain should avoid clicking any links or providing any personal information. If the domain comes back online, it could be used to harvest credentials or distribute malware. Users are advised to block the domain at the network level and report it to their security teams. Additionally, monitoring for any associated subdomains or IP addresses is recommended. PhishDestroy continues to track this domain and will update the advisory if the threat re-emerges.