at-kra38[.]cc

PhishDestroy identifies at-kra38.cc as an active domain involved in generic phishing attacks. This domain poses an elevated risk by attempting to deceive users into divulging sensitive information through impersonation tactics, although no specific brand is targeted. Its current status remains active, indicating ongoing malicious activity.

Technical intelligence reveals that at-kra38.cc was created recently on January 23, 2025, and is registered through NICENIC INTERNATIONAL GROUP CO., LIMITED. The domain resolves to IP address 188.114.97.3 and holds an SSL certificate issued by Google Trust Services, which may lend it false credibility. VirusTotal analysis reports that 5 out of 95 security vendors have flagged this domain for phishing-related threats, reinforcing its malicious nature. While the blocklist count is not explicitly provided, the presence of multiple vendor detections confirms its risk profile.

Given the elevated risk level and confirmed active status, it is strongly recommended that users and organizations block access to at-kra38.cc across their networks. Security teams should update their phishing filters and monitor for any related indicators of compromise. End users must be advised to avoid interacting with this domain and to report any suspicious emails or messages containing links to at-kra38.cc. Continuous monitoring of its activity and updating threat intelligence feeds will help mitigate potential credential theft or data compromise associated with this domain.