# kra5l.cc — MALICIOUS

> KRA5L.CC is flagged as a phishing domain, created April 04, 2025. It poses a fake login threat. Avoid entering credentials! Block this site now.

## Summary
PhishDestroy identifies kra5l.cc as an active generic phishing domain. This site likely imitates a legitimate login page to steal user credentials. There's no specific brand impersonation evident at this time, nor indications of a specific drainer kit being deployed, suggesting a more general phishing approach.

Technical indicators reveal that VirusTotal reports a score of 7/95 security vendors flagging this domain as malicious. The domain resolves to IP address 188.114.96.3 and was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED on April 04, 2025. It utilizes an SSL certificate issued by Google Trust Services. The domain's age and registrar choice can be additional risk factors, particularly when combined with the phishing classification.

Currently, the domain is active and presents an elevated risk. Immediate response actions should include adding kra5l.cc to blocklists and informing users to avoid interacting with the site. The continued threat necessitates ongoing monitoring and analysis to determine the scope and impact of the phishing campaign. Given the active status, the risk remains elevated until the domain is deactivated or further intelligence indicates a change in threat level.

## Threat Details
- Verdict: MALICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2025-04-04 15:14:52
- Registrar: NICENIC INTERNATIONAL GROUP CO., LIMITED
- IP: 188.114.96.3

## Detection Status
- VirusTotal: 7 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/6f484c29-1d81-4dc3-a4bf-bd8b6fda85c5
- PhishDestroy: https://phishdestroy.io/domain/kra5l.cc/
- LLM endpoint: https://phishdestroy.io/domain/kra5l.cc/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/kra5l.cc/
Last updated: 2026-03-26