krak18-cc[.]com

The domain krak18-cc.com has been identified as hosting a generic phishing site. This domain does not appear to be associated with any specific brand or drainer kit, indicating it may be part of a broader phishing campaign designed to capture a wide range of credentials or personal information.

Infrastructure analysis reveals that krak18-cc.com resolves to the IP address 185.226.92.168. The domain was created on March 27, 2026, and is registered through NICENIC INTERNATIONAL GROUP CO., LIMITED. On VirusTotal, 11 out of 95 security vendors flag this domain as malicious, suggesting a moderate level of consensus among security professionals regarding its threat status. The domain does not have an SSL certificate, which is often a red flag for phishing sites, as it indicates a lack of secure communication. Additionally, the domain appears on 1 security blocklist, further corroborating its classification as a phishing site.

As of the latest assessment, krak18-cc.com is currently offline, which may indicate that the domain has been taken down by the registrar, hosting provider, or due to law enforcement action. Despite the domain being offline, the risk remains elevated due to the possibility of the domain being reactivated or repurposed. It is recommended that users remain vigilant and avoid interacting with this domain if it becomes active again. Security teams should monitor for any signs of the domain's resurgence and consider implementing additional protective measures, such as DNS filtering or web proxy blocks, to mitigate potential risks.