at-kra36[.]cc

PhishDestroy has identified at-kra36.cc as an active generic phishing site. This domain presents an elevated risk to users, as it is designed to steal credentials or sensitive information through deceptive means. No specific brand or drainer kit has been identified at this time, indicating a potentially broad or still-developing phishing campaign.

Technical indicators for at-kra36.cc reveal that VirusTotal reports a score of 4/95, meaning four security vendors have flagged the domain as malicious. The domain is registered through NICENIC INTERNATIONAL GROUP CO., LIMITED. It resolves to IP address 172.67.204.56 and was created on January 23, 2025. The SSL certificate is provided by Google Trust Services. There is no current Google Safe Browsing (GSB) status available, and no blocklist count beyond VirusTotal.

The domain at-kra36.cc is currently active and poses an elevated phishing risk. Immediate response actions include blocking the domain at the network level and educating users about the potential threat. Users should be advised to avoid interacting with any content or links associated with this domain. Given the active status, continuous monitoring is crucial to detect any changes in its behavior or associated campaigns. The remaining risk is considered elevated due to the confirmed phishing nature and active status.