kra20-at[.]cc

kra20-at.cc is confirmed to be a phishing site, actively attempting to deceive users into providing sensitive information such as login credentials and financial data. Analysis indicates that the domain has been flagged by 15 out of 95 security vendors on VirusTotal, a notable detection rate that underscores its malicious nature. The domain was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED and created on March 28, 2026. It appears on 1 security blocklist and is currently blocked by PhishDestroy.

Infrastructure analysis reveals that kra20-at.cc resolves to the IP address 95.85.236.107, which is located in Germany and hosted by MHost LLC. The domain lacks an SSL certificate, further indicating its untrustworthiness and potential for intercepting user data. The elevated risk level is justified by the combination of high detection rates, blocklist presence, and the absence of secure communication protocols.

If users have visited kra20-at.cc, they should immediately change any passwords or sensitive information that may have been entered on the site. It is recommended to run a full system scan for malware and to monitor accounts for any unusual activity. Additionally, users should report the incident to their IT security team or a trusted cybersecurity professional for further assistance and to ensure that all potential security breaches are addressed.