kra039[.]at

The domain kra039.at has been identified as a generic phishing site with an elevated risk level and is currently active. There is no specific brand impersonation noted in the available intelligence. The site poses a significant threat to users who may inadvertently disclose sensitive information.

Analysis indicates that kra039.at is flagged by 7 of 95 security vendors on VirusTotal, suggesting a moderate level of suspicion among the security community. The domain is registered through Hosting Concepts B.V. d/b/a Registrar.eu and resolves to the IP address 188.114.96.3. It appears on 1 security blocklist, further corroborating its malicious nature. The SSL certificate for the domain is issued by Let's Encrypt, which is often used by threat actors to gain user trust by providing a secure connection. The exact creation date of the domain is not provided, but the recent activity and presence on blocklists indicate that it has been active for a relatively short period.

Given the current status of the domain as active and the elevated risk level, it is recommended that network administrators and security teams block access to kra039.at to prevent potential phishing attacks. Users should be educated to recognize and avoid interacting with any links or emails leading to this domain. Additionally, monitoring for any related infrastructure and indicators of compromise is advised to mitigate broader phishing campaigns that may be associated with this domain.