krareklama[.]cc

PhishDestroy identifies krareklama.cc as a credential theft site currently active and engaged in malicious operations. This domain is designed to mimic legitimate services to deceive users into submitting sensitive login credentials, which are then harvested by attackers for unauthorized access or further exploitation. The threat is confirmed by multiple security vendors and remains unresolved, posing an elevated risk to unsuspecting visitors.

This domain was flagged by 3 of 95 VirusTotal vendors, registered through NICENIC INTERNATIONAL GROUP CO., LIMITED, and resolves to IP address 188.114.96.3. The domain was created on June 22, 2025, and currently has no known blocklist entries. The SSL certificate is issued by Google Trust Services, which does not validate the domain’s legitimacy. The low detection rate on VirusTotal suggests this domain is newly operational or employs evasion techniques to avoid immediate detection.

Given the confirmed credential theft threat and active status, PhishDestroy strongly advises against interacting with krareklama.cc. Users should avoid entering any personal or login information on this site. Organizations and individuals are recommended to block this domain at the network level and report it to their security teams or relevant authorities. If credentials were inadvertently submitted, change passwords immediately and enable multi-factor authentication where possible. Continuous monitoring for suspicious activity is advised due to the domain’s recent creation and low detection rate.