kra55c[.]cc

kra55c.cc was registered on March 26, 2026 through NICENIC INTERNATIONAL GROUP CO., LIMITED and is currently resolved to the Cloudflare‑owned address 172.67.223.90 located in Canada. The domain is delegated to the Cloudflare nameservers eleanor.ns.cloudflare.com and scott.ns.cloudflare.com, and presents a TLS certificate issued by Google Trust Services under the WE1 umbrella. These characteristics indicate the use of a reputable CDN to mask the true hosting environment. Access to the domain returns an HTTP 301 redirect and the sole visible page title is “Captcha”. No additional content or branding is observable, but the title suggests an attempt to mimic a verification page commonly used in credential‑capture campaigns. The presence of a valid SSL certificate may be intended to increase user confidence and to evade simple HTTP‑only detection mechanisms. Threat intelligence sources corroborate malicious intent. The domain appears on one security blocklist and is flagged by PhishDestroy. VirusTotal records seven detections out of ninety‑five scanned scanners, indicating that a minority of AV engines have identified suspicious activity. AlienVault OTX lists the domain in a single pulse, and Gridinsoft assigns a trust score of 0 out of 100, reflecting a high confidence of abuse. The combined evidence places the domain in the high‑risk category. Defenders should block kra55c.cc at the DNS and proxy layers and monitor outbound connections to the associated IP address. Given the active status and recent registration, continuous telemetry collection is advised to capture any evolving payloads or credential‑phishing pages that may be served behind the redirect. Incident response teams should also consider sinkholing the domain to disrupt further campaigns.