krak4-at[.]com

The domain krak4-at.com has been identified as a high-risk phishing site. The threat type associated with this domain is generic phishing; however, it does not appear to impersonate any specific brand or utilize a known drainer kit. The lack of an SSL certificate further indicates a potential security risk, as secure communication is not facilitated. This points to an intent to deceive users, potentially capturing sensitive information such as login credentials.

Technical analysis of krak4-at.com reveals critical indicators of malicious activity. The domain is flagged by 16 out of 95 security vendors on VirusTotal, underlining its compromised nature and malicious intent. Registered through NICENIC INTERNATIONAL GROUP CO., LIMITED, the domain is hosted at the IP address 95.85.236.107, located in Germany under MHost LLC. The domain's creation on March 28, 2026, suggests its recent setup, possibly intended for a short-lived phishing campaign. It is also flagged by Google Safe Browsing for phishing activity and appears on two security blocklists, further confirming its threat level.

Currently, krak4-at.com is offline, a necessary action implemented to mitigate further risk. The domain is already blocked by noted security providers, PhishDestroy and PhishingDB, indicating a swift response by cybersecurity defenses. However, the risk remains significant due to its initial operation and potential for reactivation or migration to alternative domains. Continuous monitoring of related IP addresses and further threats linked to the registrar should be maintained. Additionally, educating users on recognizing phishing threats remains crucial to mitigate the impact of such malicious domains.