kra330[.]cc

This domain, kra330.cc, is currently active and classified as a generic_phishing threat targeting user credentials through fake login portals. Analysis indicates no specific brand impersonation, but the infrastructure is designed to harvest authentication details via deceptive web forms. The domain remains operational as of the latest verification. Infrastructure analysis reveals kra330.cc was registered on March 29, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED. It is flagged by 12 of 95 security vendors on VirusTotal, with a single appearance on security blocklists. The domain exhibits an elevated risk level, corroborated by its detection ratio and registration patterns. No associated IP addresses or hosting providers were provided in the initial data, but the registrar’s history suggests a preference for domains linked to short-lived phishing campaigns. Current status confirms kra330.cc remains active, posing an ongoing risk to users encountering it through malicious links or redirects. Immediate mitigation includes blocking the domain at the network perimeter, updating endpoint protection rules, and alerting users to verify URLs before entering credentials. Organizations should monitor for related indicators, such as newly registered domains under the same registrar, and correlate logs for connections to kra330.cc. If interaction is suspected, reset credentials and conduct a forensic review of affected systems.