kro46[.]cc

The domain kro46.cc is a generic phishing site designed to deceive users into disclosing sensitive information through fraudulent login or verification prompts. It does not impersonate a specific brand or employ a known crypto drainer kit. As of the latest verification, kro46.cc has been taken offline, though prior activity classified it as an elevated-risk threat.

Technical indicators confirm kro46.cc was flagged by 3 of 95 security vendors on VirusTotal, including alphaMountain.ai, Forcepoint ThreatSeeker, and SOCRadar. The domain was registered through Hosting Concepts B.V. d/b/a Registrar.eu on November 15, 2025, and resolved to the IP address 188.114.97.3, hosted on Cloudflare's network (AS13335). It appeared on one security blocklist (PhishDestroy) and lacked an SSL certificate. The observed page title, 'Проверка браузера,' suggests a browser verification scam. Gridinsoft assigned a trust score of 0/100, and the domain used Cloudflare nameservers (chad.ns.cloudflare.com and zoe.ns.cloudflare.com).

Users who interacted with kro46.cc should immediately change any credentials entered on the site and enable two-factor authentication (2FA) on affected accounts. Monitor financial and login activity for unauthorized access. Report the domain to Google Safe Browsing, PhishTank, or local cybersecurity authorities to assist in broader mitigation efforts. If crypto wallet interactions occurred, revoke any suspicious token approvals and consider transferring funds to a new wallet.