kra35-at[.]cc

The domain kra35-at.cc has been identified as a generic phishing threat. No specific brand impersonation or drainer kit activity has been detected. This domain poses an elevated risk to unsuspecting users who may be lured into providing sensitive information.

Analysis indicates that the domain has a VirusTotal score of 15/95, suggesting a significant level of detection by security vendors. The domain is registered through NICENIC INTERNATIONAL GROUP CO., LIMITED and resolves to the IP address 95.85.236.107, which is located in Germany and managed by MHost LLC. The domain was created on March 28, 2026, and does not have an SSL certificate. It appears on 1 security blocklist, further corroborating its malicious nature.

The domain is currently offline, which reduces the immediate risk of active attacks. However, the infrastructure and registration details suggest that the domain could be reactivated at any time. Response actions should include monitoring for any signs of reactivation and ensuring that network defenses are updated to block access to this domain. Users should be educated to recognize and avoid potential phishing attempts and to report any suspicious activity to their security teams.