www--kra46cc[.]ru

PhishDestroy identifies www--kra46cc.ru as an active credit card phishing scam targeting unsuspecting users. The domain leverages deceptive visual cues—such as double hyphens and numeric substitutions—to mimic legitimate financial portals, tricking victims into entering sensitive payment card details. Risk level remains elevated due to the specificity of the lure and ongoing accessibility.

This domain was flagged for credit card phishing on November 14, 2025, just hours after creation. It resolves to IP address 188.114.96.3 and is currently detected by only 1 out of 95 VirusTotal security vendors. The domain is registered through DOMENUS-RU and secured with a Google Trust Services SSL certificate, increasing its credibility to potential victims. Despite low vendor detection, the combination of fresh registration, high-risk IP hosting, and deceptive branding signals active malfeasance.

To mitigate exposure, users are advised to avoid entering any payment information on this domain. Financial institutions should block traffic to 188.114.96.3 and monitor for associated fraudulent transactions. Organizations are encouraged to update browser blocklists with the domain and IP, and to deploy email filtering rules targeting lookalike domains with numeric substitutions. Immediate reporting to cybersecurity teams and card issuers is recommended upon suspected interaction.