kra10[.]cc

As of July 19, 2026, the domain kra10.cc has been flagged as a phishing domain by 5 of 91 security vendors. The domain is currently offline and returns an HTTP 403 status code, indicating that access is forbidden. Infrastructure analysis reveals that the domain is hosted on Cloudflare, with nameservers aragorn.ns.cloudflare.com and kehlani.ns.cloudflare.com. The SSL certificate is issued by Google Trust Services, which is unusual for a phishing domain but not unheard of. The domain resolves to the IP address 104.21.3.242, located in California, USA, and is registered through NICENIC INTERNATIONAL GROUP CO., LIMITED. It appears on one security blocklist and has been blocked by PhishDestroy. The domain has also been mentioned in two threat intelligence pulses on AlienVault OTX, suggesting that it has been associated with known phishing activities. Given the elevated risk level and the fact that the domain is offline, defenders should remain vigilant and ensure that this domain is blocked in their network security policies to prevent potential future attacks. The exact content and target of the phishing activity have not been analyzed, but the domain's history and current status indicate a significant risk.