kra3-ccc[.]com

The domain kra3-ccc.com was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED and first observed on May 02, 2025. Infrastructure analysis shows that the domain resolves to the IPv4 address 185.226.92.168 and is served by the DNS providers a.dnspod.com, b.dnspod.com, and c.dnspod.com. The domain is presently listed on a single security blocklist and has been actively blocked by the PhishDestroy filtering service. VirusTotal scans indicate that 15 of 91 security vendors have flagged the domain as malicious, reinforcing the suspicion of phishing activity.

No additional public threat intelligence, such as Safe Browsing or OTX entries, is currently available for this domain, and the page title or any brand‑specific content has not been disclosed in the supplied data. The limited visibility suggests that the phishing campaign may be in an early deployment stage or employing a low‑profile hosting configuration. Defenders should prioritize immediate containment by adding kra3-ccc.com and its resolving IP address 185.226.92.168 to deny lists across perimeter firewalls, DNS resolvers, and endpoint protection platforms.

Continuous monitoring of DNS query patterns for the associated dnspod nameservers is advised to detect any future sub‑domain expansion. Organizations should also consider sharing the indicator set with threat‑sharing communities to improve collective detection. Given the elevated risk rating, security teams are urged to treat any communications originating from this domain as potentially fraudulent and to educate users about the likelihood of credential‑harvesting attempts.