# kra46.today — SUSPICIOUS

> Is kra46.today safe? This domain is under active phishing investigation for fake giveaway scams. Check the full report for details.

## Summary
PhishDestroy identifies kra46.today as an active phishing domain distributing a generic phishing kit designed to deceive users into surrendering credentials or cryptocurrency under the false pretense of a giveaway or reward program. While no specific brand is being impersonated in this campaign, the site leverages urgency and false scarcity to prompt rapid, uninformed user actions. The infrastructure appears freshly provisioned, with no established reputation, indicating a high likelihood of ongoing or imminent exploitation against unsuspecting visitors. This domain is currently unresolved by major blocklists but remains under active forensic monitoring due to elevated threat signals.

This domain resolves to IP address 188.114.97.3 and is secured with a Google Trust Services SSL certificate, a tactic commonly used to lend false legitimacy to malicious sites. Registered through NICENIC INTERNATIONAL GROUP CO., LIMITED on November 27, 2025 — a recent creation that coincides with the domain’s first observed malicious activity. VirusTotal currently reports 0/95 detections, suggesting it has evaded signature-based detection tools thus far. It remains unlisted in Google Safe Browsing (GSB) and has not been flagged by major threat intelligence platforms, leaving a critical detection gap for end users and organizations relying on automated defenses.

As of this report, kra46.today is classified under active investigation with a status of "under_investigation" and a seed identifier of 8fa97b. No public blocklist entries have been recorded, but the domain is being tracked for rapid takedown escalation. Users are advised to avoid interaction and report any encounters. Organizations should implement DNS-level blocking and monitor for outbound connections to 188.114.97.3. The residual risk remains HIGH due to the undetected nature of the infrastructure and the absence of proactive blocking by mainstream security vendors.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2025-11-27 12:18:09
- Registrar: NICENIC INTERNATIONAL GROUP CO., LIMITED
- IP: 188.114.97.3

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/4b858bcd-08b1-4d53-81f5-33699f023c35
- PhishDestroy: https://phishdestroy.io/domain/kra46.today/
- LLM endpoint: https://phishdestroy.io/domain/kra46.today/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/kra46.today/
Last updated: 2026-03-28