# kra29-at.cc — SUSPICIOUS

> kra29-at.cc is a newly registered domain hosting a suspected fake login portal. It poses as a credential harvesting site and currently shows 0/95 VirusTotal.

## Summary
PhishDestroy identifies kra29-at.cc as an active domain under investigation for generic phishing, specifically designed to impersonate a login portal for credential theft. The threat level remains under_investigation but is flagged as active due to its deceptive design.  This domain was flagged by PhishDestroy with the following details: created on November 03, 2024, resolving to IP 188.114.97.3, registered through NICENIC INTERNATIONAL GROUP CO., LIMITED, and secured with a Google Trust Services SSL certificate. It currently shows 0/95 detections on VirusTotal, indicating no blacklist coverage yet, which poses a heightened risk for early-stage phishing attacks.  Mitigation for this threat type includes: 1) Blocking the domain kra29-at.cc at the network and DNS levels, 2) Educating users to verify URLs and avoid entering credentials on unfamiliar sites, and 3) Monitoring for any related domains registered through the same NICENIC INTERNATIONAL GROUP CO., LIMITED registrar. Immediate action is advised due to the domain's recent creation and low detection rate.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2024-11-03 18:55:30
- Registrar: NICENIC INTERNATIONAL GROUP CO., LIMITED
- IP: 188.114.97.3

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/4c45188b-6b98-422b-9b0b-6cf9cb3be955
- PhishDestroy: https://phishdestroy.io/domain/kra29-at.cc/
- LLM endpoint: https://phishdestroy.io/domain/kra29-at.cc/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/kra29-at.cc/
Last updated: 2026-03-21