# kras4.cc — SUSPICIOUS

> PhishDestroy warns: kras4.cc hosts a fake login page! Created January 2026 and flagged by 4/95 vendors, this site poses a risk. Verify on PhishDestroy now.

## Summary
PhishDestroy identifies kras4.cc as a phishing site hosting a fake login page. The domain aims to steal user credentials through deceptive tactics. The site does not appear to be impersonating a specific brand, but the generic login page is a clear indicator of malicious intent.

Technical analysis reveals that VirusTotal flags the domain with a score of 4/95. The domain was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED on January 22, 2026, and it resolves to IP address 188.114.97.3. The SSL certificate is issued by Google Trust Services. The domain is currently active and resolving.

At the time of analysis, the domain is active, presenting an elevated risk to users. Security measures should include blocking the domain on network devices and educating users to avoid interacting with the site. Ongoing monitoring is recommended to detect any changes in the domain's behavior or associated infrastructure.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2026-01-22 11:41:39
- Registrar: NICENIC INTERNATIONAL GROUP CO., LIMITED
- IP: 188.114.97.3

## Detection Status
- VirusTotal: 4 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/6714b4be-7af0-4620-8c53-867b882cbffe
- PhishDestroy: https://phishdestroy.io/domain/kras4.cc/
- LLM endpoint: https://phishdestroy.io/domain/kras4.cc/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/kras4.cc/
Last updated: 2026-03-24