Phishing domains under .at

.at accounts for 698 of the 224,866 domains in the PhishDestroy database (0.31%), with 28 new ones in the last 30 days. The most impersonated brand under .at is Kraken. 410 were online at the last check and 101 have a confirmed takedown.

698
Reported .at domains
0.31%
Share of PhishDestroy reports
28
Last 30 days
101
Confirmed takedowns

Detections per month

2025-11: 252025-12: 462026-01: 472026-02: 1192026-03: 802026-04: 282026-05: 212026-06: 1172026-07: 632026-08: 552026-09: 402026-10: 18
.at phishing domains detected per month: 659 from 2025-11 to 2026-10; peak 119.

Brands and registrars

Impersonated brands

  1. Kraken29
  2. Phantom25
  3. MetaMask15
  4. Coinbase14
  5. Google11
  6. Coinbase10
  7. Steam10
  8. Kraken9

Registrars

  1. Hosting concepts / Registrar.eu ( https:87
  2. Key-Systems ( https://nic.at/registrar/456
  3. Gransy s.r.o. ( https://nic.at/registrar37
  4. Iqweb34
  5. Registrar.eu33
  6. N/A14
  7. TLD Registry (.at)14
  8. Cloudflare13

Latest .at phishing domains

The 30 most recently detected .at domains
DomainFirst detectedStatus at last checkRegistrar
captcha.slons10.at2026-10-21OnlineDynadot ( https://nic.at/registrar/650 )
hyperliquidapp.at2026-10-20OnlineHosting concepts / Registrar.eu ( https:
changellyexchange.at2026-10-20OfflineHosting concepts / Registrar.eu ( https:
cakewallets.at2026-10-20OfflineHosting concepts / Registrar.eu ( https:
energy-dasstudio.at2026-10-19Onlineeasyname ( https://nic.at/registrar/414
old-rabby.at2026-10-19OnlineHosting concepts / Registrar.eu ( https:
v2-exodus.at2026-10-16Online—
rainbet-online.at2026-10-16OnlineDynadot ( https://nic.at/registrar/650 )
mgmarket11.at2026-10-16Online—
captcha-slon6.at2026-10-16OfflineGransy s.r.o. ( https://nic.at/registrar
en-atomic.at2026-10-11Online—
trezor-uk.at2026-10-11Online—
dato.co.at2026-10-11OnlineRegistryGate ( https://nic.at/registrar/
changelly-en.at2026-10-09Offline—
lidofinance-en.at2026-10-07Online—
mgmarket-5.at2026-10-07OnlineDocky /Huang Chao Ming ( https://nic.at/
mgmarket-6.at2026-10-07Online—
yonataxi.at2026-10-07Online—
trip80.at2026-09-27Online—
berlusconi-cc.at2026-09-27Online—
121z3.ralind.at2026-09-27Onlinehelloly ( https://nic.at/registrar/743 )
bsblsp.at2026-09-25OnlineKey-Systems ( https://nic.at/registrar/4
121z2.ralind.at2026-09-25Onlinehelloly ( https://nic.at/registrar/743 )
mgmarket06.at2026-09-25Onlineedomains ( https://nic.at/registrar/728
bssl.at2026-09-25OnlineKey-Systems ( https://nic.at/registrar/4
bs2web8.at2026-09-25OnlineKey-Systems ( https://nic.at/registrar/4
v-blsp.at2026-09-25OnlineKey-Systems ( https://nic.at/registrar/4
settings-update.at2026-09-23Offline—
kraken-zerkalo.at2026-09-22OnlineKey-Systems ( https://nic.at/registrar/4
kra28at.at2026-09-21OnlineEdomains ( https://nic.at/registrar/728

Related

Data: PhishDestroy domain-report database, built 2026-10-22. The share is of PhishDestroy reports, not of all .at registrations; first .at report 2025-08-09.