kra-34-cc[.]com

PhishDestroy identifies kra-34-cc.com as a domain engaged in generic phishing activities, currently classified with an elevated risk level. No specific brand impersonation or crypto drainer kit has been linked to this domain at this time. The domain appears to be used for broad phishing campaigns aimed at deceiving users into divulging sensitive information under generic pretenses.

Technical analysis reveals kra-34-cc.com was registered on February 8, 2025, through NICENIC INTERNATIONAL GROUP CO., LIMITED. VirusTotal scanning flags this domain with a low detection rate of 1 out of 95 security vendors. The domain resolves to IP address 104.21.95.163 and is secured by a valid SSL certificate issued by Google Trust Services. There is no indication of Google Safe Browsing (GSB) blacklisting. Despite the low VT detection, the domain is active and considered elevated risk due to its phishing classification.

Currently, kra-34-cc.com remains active with no widespread blocklisting yet implemented. PhishDestroy recommends users avoid interacting with this domain and verify any suspicious communications linked to it on the PhishDestroy platform. Security teams should monitor for any escalation in detection or additional threat intelligence. Given the domain's recent creation and low detection rate, vigilance is crucial as threat actors may still be developing or deploying their phishing infrastructure.