kra-33[.]net

This domain, kra-33.net, is identified as a generic phishing site designed to mimic captcha verification pages. Analysis indicates the absence of direct brand impersonation or crypto drainer kit signatures, suggesting a broader credential-harvesting or malware-distribution campaign. The page title "Captcha" aligns with common social engineering tactics to deceive users into completing fraudulent verification steps, potentially leading to credential theft or device compromise.

Technical indicators confirm elevated risk: the domain was created on March 27, 2026, and is registered through NICENIC INTERNATIONAL GROUP CO., LIMITED. It resolves to the IP address 172.67.144.80, a host with prior associations to malicious activity. Security vendors on VirusTotal flagged the domain at a detection rate of 13/95, while it appears on one security blocklist and has been documented in a single threat intelligence pulse. The domain currently holds a trust score of 0/100, further corroborating its malicious classification.

As of the latest assessment, kra-33.net has been taken offline, likely in response to security community reporting or registrar enforcement actions. However, residual risk persists due to the potential for infrastructure reuse or domain resale. Organizations are advised to monitor for related indicators, including the registrar NICENIC INTERNATIONAL GROUP CO., LIMITED and the IP 172.67.144.80, and to implement network-level blocking for the domain and its associated infrastructure. Users should remain vigilant against captcha-themed phishing attempts, particularly those originating from newly registered or low-reputation domains.