kra47z[.]at

The domain kra47z.at, flagged by 3 out of 93 vendors on VirusTotal, is identified as a phishing threat. It was hosted on an IP managed by Cloudflare, Inc., and had an SSL certificate issued by Google Trust Services. Despite being taken offline, it initially posed a risk by impersonating legitimate websites to harvest user credentials.

PhishDestroy detected kra47z.at on January 30, 2026, ahead of its official registration date, showcasing the domain's use in a preemptive phishing campaign. This early detection highlights the domain's role in exploiting the time gap between registration and antivirus database updates, a common tactic in phishing operations.

The domain's takedown reduces its immediate threat, but its initial activity underscores the importance of rapid detection and response. While it remains inactive, the presence of kra47z.at on public blocklists, including PhishDestroy's, serves as a reminder of the evolving nature of phishing threats.