kratuxil-it[.]live

PhishDestroy identifies kratuxil-it.live as an active generic phishing domain currently under investigation for fraudulent activities. This domain poses a high-risk threat to unsuspecting users by impersonating legitimate support services, potentially leading to credential theft or financial loss. The absence of detections on VirusTotal (4/95) suggests this threat is still emerging, requiring immediate attention from cybersecurity communities.

This domain was flagged with a generic_phishing threat type and exhibits several suspicious technical indicators. VirusTotal reports 4/95 detections as of the latest scan, indicating no immediate blocking by security engines. The domain was registered on May 07, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED and resolves to IP 104.21.35.75. It utilizes a Let's Encrypt SSL certificate, which may lend false legitimacy to its operations. Currently, no entry is listed in Google Safe Browsing (GSB), and blocklist counts remain unverified due to the domain's recent emergence.

The current status of kratuxil-it.live is active, with ongoing monitoring by threat intelligence teams. Users are strongly advised to avoid interacting with this domain and report any suspicious encounters. Security researchers are urged to investigate further to determine the specific payload or drainer kit in use. While the immediate risk is elevated due to low detection rates, the domain's recent creation suggests a potentially short-lived campaign. Remaining risk depends on rapid dissemination of threat intelligence and proactive blocking by security vendors.