kra57c[.]cc

Analysis of kra57c.cc shows a newly registered domain created on March 26, 2026 by NICENIC INTERNATIONAL GROUP CO., LIMITED. The domain resolves to Cloudflare IP address 172.67.146.248, which is hosted in Canada and is protected by a Google Trust Services/WE1 SSL certificate. DNS resolution uses Cloudflare's authoritative nameservers miguel.ns.cloudflare.com and raquel.ns.cloudflare.com, and the site returns an HTTP 301 redirect. The sole page title observed is "Captcha," and the domain has been flagged by PhishDestroy and appears on one public security blocklist. VirusTotal scans report seven detections out of ninety‑four vendors, and AlienVault OTX lists the domain in eight threat intelligence pulses, indicating active malicious use. Gridinsoft assigns a trust score of zero out of one hundred, reinforcing the high‑risk assessment. While the exact phishing payload or targeted brand is not disclosed, the combination of recent registration, Cloudflare hosting, low trust score, multiple vendor detections, and blocklist presence suggests the domain is being used for generic phishing activities. Defenders should add kra57c.cc to network and endpoint blocklists, monitor DNS queries for the domain, and consider sinkholing the associated IP range to disrupt any ongoing campaigns. Continuous observation is recommended to capture any evolving malicious content that may be deployed behind the current landing page.