kra30at-cc[.]top

The domain kra30at-cc.top has been identified as a generic phishing threat, specifically designed for credential theft. It is currently offline, though its recent registration and lack of SSL certificate indicate malicious intent. PhishDestroy analysis shows this domain was created on March 29, 2026, through the registrar 耐思尼克国际集团有限公司, and it resolves to IP address 91.236.116.165. The domain appears on one security blocklist and has been flagged by 2 out of 95 VirusTotal vendors, suggesting limited but growing detection. No brand impersonation is evident, but the domain's structure and behavior align with phishing campaigns aiming to harvest login credentials.

The domain kra30at-cc.top exhibits several red flags: it was created very recently (March 29, 2026), has no SSL certificate, and is already listed on one security blocklist. VirusTotal's detection ratio of 2/95 indicates that while not widely recognized as malicious, the domain is suspicious enough to trigger some security vendors. The registrar, 耐思尼克国际集团有限公司, is known for hosting low-reputation domains. The IP address 91.236.116.165 has been associated with other phishing activities, further reinforcing the risk. Despite being offline, the domain's previous availability and potential for reactivation make it a threat to users who may have encountered it.

Given the elevated risk level and confirmed phishing nature of kra30at-cc.top, users should avoid any interaction with this domain. If any credentials were entered on this site, they should be changed immediately and accounts monitored for unauthorized access. PhishDestroy recommends blocking this domain at the network level and reporting it to security teams. While currently offline, the domain could be repurposed, so continued vigilance is advised. Organizations should update their threat intelligence feeds with this indicator to prevent future compromises.