kra-b15[.]cc

The domain kra-b15.cc has been identified as an active generic phishing threat primarily targeting users with fake login scams. Although the domain does not appear to impersonate a specific well-known brand, it serves as a lure to steal credentials by mimicking legitimate login pages. The phishing activity remains ongoing with elevated risk to unsuspecting users.

Technical intelligence reveals kra-b15.cc was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED on December 12, 2025. It currently resolves to the IP address 188.114.96.3 and uses an SSL certificate issued by Google Trust Services, which may lend a false sense of security to victims. VirusTotal data shows that 4 out of 95 security vendors have flagged this domain as malicious, indicating moderate detection and consensus on its threat status. Although the exact blocklist count and trust scores are not provided, the elevated risk level and active status underscore the domain's malicious intent and persistence.

Given the domain's active status and elevated risk, users and network defenders should exercise caution by avoiding any interactions with kra-b15.cc. Organizations are advised to add kra-b15.cc to internal blocklists and monitor related IP 188.114.96.3 for suspicious traffic. End users should verify any login requests purportedly coming from this domain through trusted sources like PhishDestroy. Continuous monitoring and user education on phishing indicators remain essential to mitigate potential credential theft from this active generic phishing domain.