kra30-att[.]cc

kra30-att.cc is an active domain engaging in credential theft, posing a significant risk to users attempting to enter sensitive login information. This domain is currently operational and should be treated as a threat due to its malicious intent targeting user credentials.

The domain was registered on July 10, 2025, through NICENIC INTERNATIONAL GROUP CO., LIMITED and resolves to the IP address 185.226.92.168. VirusTotal scanning shows that 15 out of 95 security vendors have flagged kra30-att.cc as malicious. The domain holds an SSL certificate issued by Let's Encrypt, and it appears on one known security blocklist. Additionally, the domain is blocked by OISD, indicating community recognition of its threat.

At present, kra30-att.cc remains active and continues to pose a threat to users by attempting to steal credentials. It is highly recommended to block access to this domain at the network level and educate users to avoid interacting with any communications referencing this site. Monitoring for related threat indicators and updating security controls accordingly will help mitigate potential credential compromise.