kra31-att[.]cc

kra31-att.cc is a malicious domain currently active and posing as a generic phishing threat. The domain is engaged in deceptive activities aimed at impersonating legitimate services to harvest user credentials and sensitive information. kra31-att.cc has been flagged by 15 of 95 VirusTotal security vendors, indicating significant malicious activity. The domain resolves to IP address 185.226.92.168, was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED on July 10, 2025, and appears on 2 security blocklists including PhishDestroy and MetaMask. Additionally, it utilizes a Let's Encrypt SSL certificate to appear legitimate. Given its active status and the confirmed malicious intent, users should avoid interacting with kra31-att.cc entirely. Blocking the domain at the network level and reporting any observed activity to security teams is strongly recommended. Security solutions should be updated to include this domain as a known threat indicator.