kra31-at[.]cc

The domain kra31-at.cc has been assessed as having an elevated risk level and is categorized as a generic phishing domain. This assessment is based on multiple technical indicators and intelligence sources that suggest the domain's involvement in phishing activities.

Analysis indicates that kra31-at.cc was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED and does not have an SSL certificate. The domain resolves to the IP address 95.85.236.107, which is located in Germany and is hosted by MHost LLC. It was created on March 28, 2026. According to VirusTotal, 13 out of 95 security vendors flag this domain as malicious. Additionally, the domain appears on one security blocklist and is blocked by PhishDestroy. The current status of the domain is taken offline, which may indicate that it has been shut down due to suspicious activity or has been abandoned by the threat actors.

To mitigate the risks associated with kra31-at.cc, it is recommended that all users avoid accessing this domain and any associated links. Security teams should update their firewall rules and DNS configurations to block access to this IP address and domain. Conduct regular security awareness training to educate employees about the signs of phishing attacks and the importance of verifying URLs and email senders. Additionally, implement multi-factor authentication (MFA) for all critical accounts and systems to enhance security against credential theft attempts.