# kra4l.cc — MALICIOUS

> PhishDestroy warns: kra4l.cc is a phishing site designed to steal credentials through fake login pages. Created April 2025, it has a 9/95 VirusTotal score.

## Summary
PhishDestroy has identified kra4l.cc as a phishing site employing generic credential harvesting techniques. This malicious domain presents users with fraudulent login pages, aiming to steal their usernames and passwords. The site does not appear to impersonate a specific brand but uses a generic phishing kit designed for broad targeting.

Technical indicators for kra4l.cc include a VirusTotal detection ratio of 9/95, indicating that multiple security vendors have flagged the domain as malicious. The domain was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED on April 04, 2025. It resolves to the IP address 188.114.96.3. The site uses an SSL certificate issued by Google Trust Services, which does not guarantee safety, as phishers often use valid certificates to appear legitimate.

Currently, kra4l.cc is active and poses an elevated risk to users. Immediate actions include adding the domain to blocklists and informing users about the threat. Users who have interacted with this site should change their passwords immediately and monitor their accounts for suspicious activity. The risk remains elevated until the domain is fully blocked and taken down.

## Threat Details
- Verdict: MALICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2025-04-04 15:11:43
- Registrar: NICENIC INTERNATIONAL GROUP CO., LIMITED
- IP: 188.114.96.3

## Detection Status
- VirusTotal: 9 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/f1762551-f5eb-4335-bea9-1c292727057e
- PhishDestroy: https://phishdestroy.io/domain/kra4l.cc/
- LLM endpoint: https://phishdestroy.io/domain/kra4l.cc/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/kra4l.cc/
Last updated: 2026-03-26