kra-33-cc[.]cc

This domain, kra-33-cc.cc, is actively flagged as a high-risk phishing site specializing in fake bot verification schemes. Analysis indicates the domain was registered on June 23, 2025, through Hosting Concepts B.V. d/b/a Registrar.eu and currently resolves to IP address 172.67.197.233, hosted on Cloudflare’s network (AS13335) in the United States. The page title, 'Bot Verification,' suggests an attempt to deceive users into completing fraudulent verification processes, though the exact content and target brand remain unconfirmed as the site has not been fully analyzed. Infrastructure analysis reveals the domain uses Cloudflare nameservers (aron.ns.cloudflare.com and woz.ns.cloudflare.com), a common tactic to obscure hosting origins and evade takedowns.

The site lacks an SSL certificate, increasing the risk of data interception, yet returns an HTTP 200 status, indicating active operation. Google Safe Browsing classifies the domain as engaging in social engineering, while AlienVault OTX lists it in 15 threat intelligence pulses, confirming its presence in multiple security feeds. Gridinsoft assigns a trust score of 0/100, and the domain appears on at least one security blocklist, specifically PhishDestroy. Seventeen of 95 security vendors on VirusTotal flag the domain as malicious, though the absence of a full scan means this number may underrepresent the threat.

Defenders should treat this domain as active and high-risk, blocking it at the DNS and proxy levels. Given its Cloudflare hosting and lack of SSL, monitoring for similar domains using the same infrastructure (e.g., identical nameservers or IP ranges) may help identify related threats. No evidence links this domain to a specific phishing kit or brand, so further investigation is required to determine the exact nature of the scam.