kr11-at[.]com

This domain, kr11-at.com, is flagged for attempting to impersonate Google, specifically designed to deceive users into believing they are interacting with a legitimate Google service. The threat posed by this domain is elevated, as it could lead to unauthorized access to user credentials and other sensitive information if users are not cautious.

Analysis indicates that 14 out of 95 security vendors on VirusTotal have flagged this domain, highlighting its suspicious nature. The domain was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED on August 15, 2024. It has also appeared on one security blocklist, further emphasizing its malicious intent. The domain resolves to the IP address 89.124.90.206, which is located in the Netherlands and is associated with Servers Tech Fzco. The SSL certificate for this domain is issued by Let's Encrypt, which can sometimes give a false sense of security to users.

If users have visited kr11-at.com, they should immediately check their account activity for any unauthorized access. It is recommended to change passwords and enable multi-factor authentication (MFA) for all Google accounts and any other accounts that may have been used during the visit. Users should also monitor their financial statements and report any suspicious activity to their banks and credit card issuers. For further protection, users are advised to run a comprehensive security scan on their devices to ensure no malware was installed.