kra4-cc-at[.]com

The domain kra4-cc-at.com, now offline, was flagged as malicious by 17 out of 94 vendors on VirusTotal, indicating a significant threat level. Hosted in Turkey under the IP 185.226.92.168, the domain was registered with NICENIC INTERNATIONAL GROUP CO., LIMITED and utilized SSL certification from Let's Encrypt. Despite its current offline status, it was once active in phishing operations.

With a public blocklist presence on PhishDestroy, kra4-cc-at.com had an abuse score of 46 out of 100, suggesting moderate malicious activity. The domain's association with the BIGCORE organization and its Turkish hosting location may have contributed to its exploitation in phishing schemes. The domain was created on March 27, 2026, indicating it was likely a forward-dated registration intended to bypass certain security checks.

Phishing domains like kra4-cc-at.com often exploit SSL certificates to appear legitimate to unsuspecting users. The quick takedown of this domain demonstrates effective threat mitigation, but its initial activity highlights the ongoing challenges in combating phishing attacks. The presence of kra4-cc-at.com on PhishDestroy's blocklist underscores the importance of proactive threat detection and response.