at-kra21[.]cc

PhishDestroy has analyzed at-kra21.cc and identified it as a generic phishing domain. The domain is currently offline, but its recent activity posed a significant threat to users by attempting to capture sensitive information through fraudulent means.

This domain was flagged by 8 out of 95 VirusTotal security vendors, indicating widespread detection as malicious. It was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED and resolved to IP address 188.114.96.3. The domain was created on March 26, 2026, and its SSL certificate was issued by Google Trust Services / WE1. It appeared on 1 security blocklist and was found in 8 threat intelligence pulses on AlienVault OTX. The page title was "Captcha," a common lure used in phishing campaigns to trick users into entering credentials.

Given its elevated risk level and confirmed phishing nature, users should avoid any interaction with at-kra21.cc. Even though the domain is now offline, it is recommended to ensure that any saved credentials are changed and to monitor accounts for suspicious activity. PhishDestroy advises keeping this domain blocked and reporting any related phishing attempts to authorities.