MALICIOUS — CRITICAL
Pemeriksaan phishing dan keamanan kralb4.cc
kralb4[.]
The domain kralb4.cc presents a captcha page, indicating it is a gateway designed to filter traffic, likely as a precursor to malicious or fraudulent content.
- VirusTotal
- 5/93
- Blocklists
- No stored match
- Ketersediaan
- Terakhir diketahui aktif · HTTP 301
Do not enter credentials, seed phrases, payment details, or personal information on this domain.
Notification and current-status evidence
The sent-report ledger records the first outgoing report at .
The recorded recipient is abuse@nicenic.net, abuse@verisign-grs.com, compliance@icann.org.
The latest stored availability evidence still shows the domain reachable; 5 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
Jump to section
kralb4.cc — Terakhir diketahui aktif (HTTP 301). Ringkasan bukti: VirusTotal 5/93 (alphaMountain.ai, CyRadar, Forcepoint ThreatSeeker, Fortinet, SOCRadar); Spamhaus DBL_PHISH; PhishDestroy score 80/100. Registrar: NiceNIC.
Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.
Evidence Analysis
The domain kralb4.cc presents a captcha page, indicating it is a gateway designed to filter traffic, likely as a precursor to malicious or fraudulent content. This setup poses a threat by potentially verifying visitors before redirecting them to phishing sites, malware downloads, or credential harvesting pages, leveraging user interaction to bypass security checks.
Technical evidence shows the site was flagged by 5 out of 95 VirusTotal vendors, including alphaMountain.ai, CyRadar, Forcepoint ThreatSeeker, Fortinet, and SOCRadar, and appears on one blocklist. It is hosted on IP 188.114.97.3 in the United States, under AS13335 Cloudflare, Inc., and was registered through NiceNIC International Group Co., Limited on 2026-02-21. The SSL certificate is issued by Let's Encrypt with fingerprint E8, and nameservers are derek.ns.cloudflare.com and tina.ns.cloudflare.com.
The domain is currently down or offline, reducing immediate risk. However, its recent creation date, use of a captcha page, and detection by multiple security vendors indicate a moderate risk level, as it may be a temporary or parked domain prepared for future malicious campaigns.
Stored source results
Recorded verdicts and infrastructure observations for this domain.
Cakupan data12 recorded checks
Intelijen Keamanan Jaringan Registrar context
Alur Tanggapan Ancaman Pipeline
Status Daftar Blokir Publik
Latest Classified Outcome 2026-08-09 02:44:23 UTC
Analisis VirusTotal
Bukti Terarsip
Analisis Konfigurasi Situs
Bukti & Laporan EksternalIndependent lookups and source reports
PD-20260220-D7FD9A Recipient: abuse@nicenic.net, abuse@verisign-grs.com, compliance@icann.org Victim safety and official reportingImmediate actions and verified reporting channels
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.