# kra26-at.com — SUSPICIOUS

> PhishDestroy identifies kra26-at.com as a phishing domain created August 16, 2024. Exercise caution and avoid entering sensitive information.

## Summary
PhishDestroy has flagged kra26-at.com as a generic phishing domain. The domain's purpose is likely to deceive users into divulging sensitive information. Currently, no specific brand or drainer kit has been identified, suggesting a broad, untargeted phishing campaign. Further analysis is ongoing to determine the precise nature of the phishing scheme and potential targets.  

Technical indicators for kra26-at.com include a VirusTotal detection ratio of 0/95, indicating it is currently undetected by many antivirus engines. The domain is registered through NICENIC INTERNATIONAL GROUP CO., LIMITED. It resolves to IP address 188.114.96.3. The SSL certificate is issued by Google Trust Services. The domain was created on August 16, 2024. The Google Safe Browsing status is currently unknown and it is not present on any public blocklists at this time.  

As of this analysis, the domain kra26-at.com is marked as active and under investigation. Users are strongly advised to avoid interacting with this domain or providing any personal information. Due to the low VirusTotal detection rate, standard web browsers may not flag this site as dangerous. Vigilance is crucial. Monitor network traffic and firewall logs for any suspicious activity originating from or directed towards this domain. Further investigation is needed to assess the full scope of this threat and implement appropriate countermeasures. The risk level is currently considered under_investigation, but could escalate rapidly if the phishing campaign proves successful.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2024-08-16 07:38:18
- Registrar: NICENIC INTERNATIONAL GROUP CO., LIMITED
- IP: 188.114.96.3

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/60b27ac9-5044-485a-863c-ef8dd03bb3c3
- PhishDestroy: https://phishdestroy.io/domain/kra26-at.com/
- LLM endpoint: https://phishdestroy.io/domain/kra26-at.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/kra26-at.com/
Last updated: 2026-03-27