# kr97n.at — SUSPICIOUS

> kr97n.at shows phishing behavior though no detections yet. Stay vigilant and avoid sharing sensitive info on this domain.

## Summary
PhishDestroy identifies kr97n.at as a domain exhibiting generic phishing characteristics, currently under active investigation. Although this domain has not yet been flagged by any security vendors, its suspicious nature warrants caution. Users should be alert to potential attempts to steal sensitive information through deceptive means linked to this domain.

Technically, kr97n.at is registered through Dynadot LLC and resolves to the IP address 188.114.97.3. Despite the absence of detections on VirusTotal, the domain’s recent registration and hosting infrastructure suggest it could be used for malicious campaigns. The lack of current vendor flags does not eliminate risk, particularly given the domain’s phishing classification.

At present, kr97n.at remains active and under scrutiny. PhishDestroy recommends users avoid interacting with this domain and refrain from submitting any personal or financial data. Organizations should monitor network traffic for connections to this IP and consider blocking the domain as a precautionary measure until further analysis clarifies the threat level.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: alive (HTTP 200)
- Page title: slon3.at

## Domain Intelligence
- Registrar: Dynadot LLC
- Country: US
- IP: 188.114.97.3
- Nameservers: imani.ns.cloudflare.com jakub.ns.cloudflare.com

## Detection Status
- VirusTotal: 0 vendors flagged
  Vendors: []
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Screenshot: https://i.ibb.co/PBbM72k/f33549ecedbd.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/dfd19bfd-eaf0-42e0-8c2e-736d55e77867
- PhishDestroy: https://phishdestroy.io/domain/kr97n.at/
- LLM endpoint: https://phishdestroy.io/domain/kr97n.at/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/kr97n.at/
Last updated: 2026-03-19