kra27-at[.]cc

PhishDestroy identifies kra27-at.cc as a domain involved in credential theft, with no specific brand impersonation or drainer kit detected, the domain appears to be a generic threat.

The domain kra27-at.cc has a VirusTotal score of 0/95, indicating it has not been flagged by any antivirus vendors, it was registered through Gname 231 Inc, with an IP address not publicly disclosed, created on March 28, 2026, and is currently listed on 1 security blocklist, with a GSB status of offline.

The current status of kra27-at.cc is offline, which may indicate a response to the detected threat, however, the risk level remains under investigation, PhishDestroy recommends users to remain cautious and take necessary precautions to protect themselves from potential credential theft, as the domain may still pose a threat if it becomes active again, it is essential to continue monitoring the domain and its activities to ensure user safety.