xn--kr33-1na[.]cc

The domain xn--kr33-1na.cc has been identified as a generic phishing threat, designed to deceive users into divulging sensitive information. While the specific brand impersonated is not confirmed, its structure and behavior align with common phishing tactics. The site is now offline, but its prior activity posed a significant risk to visitors.

Evidence of malicious intent is substantial. VirusTotal data shows that 3 out of 95 security vendors flagged this domain as malicious. The domain was registered on March 29, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar often associated with suspicious domains. It resolves to IP 188.114.97.3 and uses a Let's Encrypt SSL certificate (E8). Additionally, the domain appears on one security blocklist and was found in one AlienVault OTX threat intelligence pulse, confirming its inclusion in known threat campaigns.

Users who visited xn--kr33-1na.cc should immediately scan their devices for malware and monitor accounts for unauthorized activity. Change passwords for any credentials entered on the site and enable two-factor authentication where possible. For ongoing protection, use PhishDestroy to verify the safety of unfamiliar domains before engaging.