kre19[.]cc

PhishDestroy has identified kre19.cc as a generic phishing domain that attempts to impersonate the Trust Wallet platform in order to steal users' cryptocurrency credentials. The domain is currently offline, but it poses a significant risk to anyone who may have interacted with it while active. Registered through Gname 432 Inc on May 04, 2026, the domain was found in 1 AlienVault OTX threat intelligence pulse and appears on 1 security blocklist, indicating that it was recognized as malicious by the cybersecurity community. According to VirusTotal analysis, 6 out of 95 security vendors flagged this domain as malicious, and it resolves to IP address 188.114.96.3, which is associated with Cloudflare. The SSL certificate was issued by Google Trust Services, which can give users a false sense of security.

Because this domain is now offline, the immediate threat of credential theft is reduced, but users who may have visited the site or entered private keys or seed phrases should take immediate action—transfer any remaining funds to a new wallet and revoke any permissions granted to the fraudulent site. PhishDestroy strongly advises always verifying the legitimacy of any wallet or exchange website by checking official sources and using trusted bookmarks. To stay protected, users should enable two-factor authentication on their accounts and avoid clicking on unsolicited links claiming to be from cryptocurrency services. For real-time verification of suspicious domains, consult PhishDestroy's database or use browser extensions that block known phishing sites.