kra-47[.]at

The domain kra-47.at is currently classified as a high‑risk generic phishing site. It was registered on 21 February 2026 and is hosted behind Cloudflare infrastructure, using the nameservers cash.ns.cloudflare.com and kallie.ns.cloudflare.com and resolving to IP address 104.21.23.181, which belongs to Cloudflare, Inc. (AS13335) and is geolocated in the United States. The site serves content over HTTPS with a certificate issued by Google Trust Services under the WE1 label, and it supports HTTP/3. Observed client‑side technologies include Yandex.Metrika and Cloudflare Browser Insights, indicating tracking capabilities. The domain is listed on one security blocklist, has a Gridinsoft trust score of 0 out of 100, and appears in a single AlienVault OTX pulse. VirusTotal analysis shows that 9 of 93 security vendors have flagged the domain, and it is actively blocked by the PhishDestroy service. The HTTP response returns status code 200, confirming that the site is reachable. No further content analysis is available, so the precise phishing payload or target brand cannot be confirmed at this time. Defenders should treat the domain as malicious, add it to blocklists at network gateways and endpoint protection solutions, monitor DNS queries for the associated IP address, and consider sink‑holing any traffic directed to the domain. Continuous re‑evaluation is advised to capture any changes in the site’s behavior or additional intelligence that may emerge.