kra---32---cc[.]top

PhishDestroy identifies kra---32---cc.top as a live cryptocurrency-themed phishing domain actively luring victims with deceptive domain patterns. This site masquerades as a legitimate crypto platform to trick users into submitting login credentials or payment details. The domain’s structure, including deliberate masking of its actual name, is a classic tactic used by threat actors to exploit user trust in familiar service names. This domain was flagged by 10 out of 95 security vendors on VirusTotal, including respected detection engines. It resolves to IP address 193.105.134.22 and was registered on June 23, 2025 through NICENIC INTERNATIONAL GROUP CO., LIMITED. Notably, its SSL certificate is tied to a non-standard entity, “Internet Widgits Pty Ltd,” raising immediate credential theft concerns. The short registration window and mismatched certificate are red flags for fraudulent intent. If you visited kra---32---cc.top, avoid entering any login details, payment card numbers, or personal information. Do not interact with prompts for “account verification” or “security updates.” Immediately close your browser, clear active cookies for this domain, and run a full antivirus scan. Report the domain to your IT team or cybersecurity provider using the IP address 193.105.134.22 and domain name for blocklisting.