kr31b[.]at

The domain kr31b.at is a generic phishing site designed to deceive users into disclosing sensitive information such as login credentials or personal data. It does not impersonate a specific brand or employ a known crypto drainer kit. As of the latest verification, kr31b.at has been taken offline, reducing immediate risk to potential victims.

Technical analysis shows that kr31b.at was flagged by 2 of 95 security vendors on VirusTotal, including alphaMountain.ai and SOCRadar. The domain is registered through Gransy s.r.o. and resolves to the IP address 188.114.97.3, hosted on Cloudflare's infrastructure (AS13335) in the US. It appears on one security blocklist, PhishDestroy, and has a Gridinsoft trust score of 0/100. The SSL certificate is issued by Google Trust Services, and the domain uses Cloudflare nameservers (chris.ns.cloudflare.com and dee.ns.cloudflare.com). Technologies detected include Cloudflare Browser Insights and HTTP/3.

Users who may have interacted with kr31b.at should immediately change any passwords or credentials entered on the site, particularly if reused across other platforms. Enable two-factor authentication (2FA) on all critical accounts to mitigate further risk. Monitor financial and online accounts for unauthorized activity. Report the phishing domain to relevant authorities or platforms, such as Google Safe Browsing, PhishTank, or local cybersecurity organizations, to aid in broader threat mitigation.