kra--24[.]cc

PhishDestroy identifies kra--24.cc as an active phishing site designed to impersonate cryptocurrency trading platforms. This domain specifically targets users by mimicking legitimate services, tricking visitors into entering login credentials or financial information under false pretenses. The site's infrastructure is crafted to harvest sensitive data, potentially leading to unauthorized access to user accounts and theft of digital assets. This domain was flagged by 7 out of 95 security vendors on VirusTotal, indicating a high level of suspicion across multiple cybersecurity platforms. It was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar known for hosting high-risk domains, and was created on April 04, 2025, making it a very recent threat with minimal historical trustworthiness. Additionally, kra--24.cc appears on 1 security blocklist and is blocked by MetaMask, a popular cryptocurrency wallet extension, further validating its malicious nature. The domain resolves to IP address 188.114.97.3 and holds an SSL certificate issued by Google Trust Services, which may be used to falsely reassure users of its legitimacy. Users who have visited kra--24.cc should immediately assume their credentials or personal data may have been compromised. If any login information was entered on the site, change passwords for that service and all associated accounts immediately. Enable two-factor authentication where possible and monitor accounts for unauthorized transactions. Avoid interacting with this domain further, and consider using a reputable ad-blocker or security extension like uBlock Origin or Bitdefender TrafficLight to prevent future exposure. Report the domain to your cybersecurity team or local authorities if it appears to be targeting organizational users, as this may indicate a broader phishing campaign.