kra20l[.]cc

The domain kra20l.cc has been identified as an active generic phishing threat. It does not appear to be linked to any specific brand or use a known drainer kit, but its purpose is to deceive users into divulging sensitive information through fraudulent means. This domain represents a significant security risk due to its elevated threat level.

Technically, kra20l.cc has a VirusTotal detection score of 1 out of 95 security vendors, indicating some detection but limited consensus. It was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED on April 4, 2025, and resolves to the IP address 188.114.97.3. The domain holds an SSL certificate issued by Google Trust Services, which may be used to lend it false credibility. Additionally, kra20l.cc appears on two different security blocklists and is actively blocked by PhishDestroy and MetaMask. It is not currently flagged by Google Safe Browsing (GSB).

Currently, kra20l.cc remains active and continues to pose an elevated phishing risk. Security platforms PhishDestroy and MetaMask have blocked it to prevent user exposure. Despite the low detection rate on VirusTotal, its presence on multiple blocklists and active blocking measures indicate a real threat. Users and organizations should avoid engaging with this domain, ensure their security filters are up to date, and report any attempts related to kra20l.cc to maintain protective measures against credential theft or other phishing consequences.