# krakvhod.cc — MALICIOUS

> krakvhod.cc is a confirmed credential-harvesting phishing site that steals user login data. Flagged by 5/95 VirusTotal engines, this domain was created July 2,.

## Summary
PhishDestroy identifies krakvhod.cc as an active credential-harvesting phishing domain designed to trick users into revealing sensitive login credentials. This malicious site mimics legitimate login portals to capture usernames and passwords, which are then exploited by attackers for unauthorized account access, identity theft, or further cyberattacks. The threat is particularly dangerous because it operates under the guise of a trusted service, making it harder for users to distinguish between real and fake login pages.  The domain’s malicious nature is confirmed by multiple detection sources. VirusTotal analysis shows 5 out of 95 security vendors flag krakvhod.cc as harmful, while PhishDestroy has already added it to their blocklist. This domain was registered on July 2, 2025, through NICENIC INTERNATIONAL GROUP CO., LIMITED, and resolves to IP address 188.114.96.3. The recent creation date and low detection rate suggest this phishing campaign is still in its early stages, increasing the risk of successful compromises before widespread blocking occurs.  If you visited krakvhod.cc or entered any personal information, take immediate action to secure your accounts. Change passwords for any credentials entered on this site, enable multi-factor authentication where available, and monitor accounts for suspicious activity. Report the domain to PhishDestroy and your organization’s security team if applicable. Avoid revisiting the site, as it may deploy additional malware or continue phishing attempts. Stay vigilant by verifying website URLs and using trusted security tools to block known malicious domains.

## Threat Details
- Verdict: MALICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2025-07-02 12:36:06
- Registrar: NICENIC INTERNATIONAL GROUP CO., LIMITED
- IP: 188.114.96.3

## Detection Status
- VirusTotal: 5 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 1 hits
  Lists: ["PhishDestroy"]

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/ba3e868d-54ef-4751-9fbe-ec5c8f78cee8
- PhishDestroy: https://phishdestroy.io/domain/krakvhod.cc/
- LLM endpoint: https://phishdestroy.io/domain/krakvhod.cc/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/krakvhod.cc/
Last updated: 2026-03-26