krar47[.]at

The domain krar47.at was a phishing site engaged in brand impersonation targeting Kraken, a cryptocurrency exchange. It posed an elevated risk by mimicking Kraken's branding to deceive users into disclosing login credentials or sensitive information, though no drainer kit was detected. As of the latest verification, krar47.at has been taken offline.

Technical analysis shows that krar47.at was flagged by 1 of 95 VirusTotal security vendors, including SOCRadar, and appeared on 1 security blocklist (PhishDestroy). The domain was registered through Gransy s.r.o. on February 21, 2026, and resolved to the IP address 188.114.96.3, hosted on Cloudflare's network (AS13335). The SSL certificate was issued by Let's Encrypt (E8), and the observed page title referenced a Tor onion service address. Technologies detected included Cloudflare and HTTP/3, with a Gridinsoft trust score of 0/100.

Users who interacted with krar47.at should immediately change their Kraken account passwords and enable two-factor authentication (2FA) to prevent unauthorized access. Monitor account activity for signs of fraud, such as unauthorized transactions or login attempts. Report the phishing domain to Kraken's security team and submit it to platforms like Google Safe Browsing, PhishTank, or the Anti-Phishing Working Group (APWG) to aid in takedown efforts.