# Phishing domains under .at .at accounts for 698 of the 224,866 domains in the PhishDestroy database (0.31%), with 28 new ones in the last 30 days. The most impersonated brand under .at is Kraken. 410 were online at the last check and 101 have a confirmed takedown. 698Reported .at domains 0.31%Share of PhishDestroy reports 28Last 30 days 101Confirmed takedowns ## Detections per month .at phishing domains detected per month: 659 from 2025-11 to 2026-10; peak 119. ## Brands and registrars ### Impersonated brands - [Kraken](https://phishdestroy.io/brand/kraken/)29 - [Phantom](https://phishdestroy.io/brand/phantom/)25 - [MetaMask](https://phishdestroy.io/brand/metamask/)15 - [Coinbase](https://phishdestroy.io/brand/coinbase/)14 - [Google](https://phishdestroy.io/brand/google/)11 - [Coinbase](https://phishdestroy.io/brand/coinbase/)10 - [Steam](https://phishdestroy.io/brand/steam/)10 - [Kraken](https://phishdestroy.io/brand/kraken/)9 ### Registrars - [Hosting concepts / Registrar.eu ( https:](https://phishdestroy.io/registrar/registrar-eu/)87 - [Key-Systems ( https://nic.at/registrar/4](https://phishdestroy.io/registrar/key-systems/)56 - [Gransy s.r.o. ( https://nic.at/registrar](https://phishdestroy.io/registrar/gransy/)37 - [Iqweb](https://phishdestroy.io/registrar/iqweb/)34 - [Registrar.eu](https://phishdestroy.io/registrar/registrar-eu/)33 - N/A14 - TLD Registry (.at)14 - Cloudflare13 ## Latest .at phishing domains The 30 most recently detected .at domains Domain | First detected | Status at last check | Registrar | [captcha.slons10.at](https://phishdestroy.io/domain/captcha.slons10.at/) | 2026-10-21 | Online | Dynadot ( https://nic.at/registrar/650 ) | [hyperliquidapp.at](https://phishdestroy.io/domain/hyperliquidapp.at/) | 2026-10-20 | Online | Hosting concepts / Registrar.eu ( https: | [changellyexchange.at](https://phishdestroy.io/domain/changellyexchange.at/) | 2026-10-20 | Offline | Hosting concepts / Registrar.eu ( https: | [cakewallets.at](https://phishdestroy.io/domain/cakewallets.at/) | 2026-10-20 | Offline | Hosting concepts / Registrar.eu ( https: | [energy-dasstudio.at](https://phishdestroy.io/domain/energy-dasstudio.at/) | 2026-10-19 | Online | easyname ( https://nic.at/registrar/414 | [old-rabby.at](https://phishdestroy.io/domain/old-rabby.at/) | 2026-10-19 | Online | Hosting concepts / Registrar.eu ( https: | [v2-exodus.at](https://phishdestroy.io/domain/v2-exodus.at/) | 2026-10-16 | Online | — | [rainbet-online.at](https://phishdestroy.io/domain/rainbet-online.at/) | 2026-10-16 | Online | Dynadot ( https://nic.at/registrar/650 ) | [mgmarket11.at](https://phishdestroy.io/domain/mgmarket11.at/) | 2026-10-16 | Online | — | [captcha-slon6.at](https://phishdestroy.io/domain/captcha-slon6.at/) | 2026-10-16 | Offline | Gransy s.r.o. ( https://nic.at/registrar | [en-atomic.at](https://phishdestroy.io/domain/en-atomic.at/) | 2026-10-11 | Online | — | [trezor-uk.at](https://phishdestroy.io/domain/trezor-uk.at/) | 2026-10-11 | Online | — | [dato.co.at](https://phishdestroy.io/domain/dato.co.at/) | 2026-10-11 | Online | RegistryGate ( https://nic.at/registrar/ | [changelly-en.at](https://phishdestroy.io/domain/changelly-en.at/) | 2026-10-09 | Offline | — | [lidofinance-en.at](https://phishdestroy.io/domain/lidofinance-en.at/) | 2026-10-07 | Online | — | [mgmarket-5.at](https://phishdestroy.io/domain/mgmarket-5.at/) | 2026-10-07 | Online | Docky /Huang Chao Ming ( https://nic.at/ | [mgmarket-6.at](https://phishdestroy.io/domain/mgmarket-6.at/) | 2026-10-07 | Online | — | [yonataxi.at](https://phishdestroy.io/domain/yonataxi.at/) | 2026-10-07 | Online | — | [trip80.at](https://phishdestroy.io/domain/trip80.at/) | 2026-09-27 | Online | — | [berlusconi-cc.at](https://phishdestroy.io/domain/berlusconi-cc.at/) | 2026-09-27 | Online | — | [121z3.ralind.at](https://phishdestroy.io/domain/121z3.ralind.at/) | 2026-09-27 | Online | helloly ( https://nic.at/registrar/743 ) | [bsblsp.at](https://phishdestroy.io/domain/bsblsp.at/) | 2026-09-25 | Online | Key-Systems ( https://nic.at/registrar/4 | [121z2.ralind.at](https://phishdestroy.io/domain/121z2.ralind.at/) | 2026-09-25 | Online | helloly ( https://nic.at/registrar/743 ) | [mgmarket06.at](https://phishdestroy.io/domain/mgmarket06.at/) | 2026-09-25 | Online | edomains ( https://nic.at/registrar/728 | [bssl.at](https://phishdestroy.io/domain/bssl.at/) | 2026-09-25 | Online | Key-Systems ( https://nic.at/registrar/4 | [bs2web8.at](https://phishdestroy.io/domain/bs2web8.at/) | 2026-09-25 | Online | Key-Systems ( https://nic.at/registrar/4 | [v-blsp.at](https://phishdestroy.io/domain/v-blsp.at/) | 2026-09-25 | Online | Key-Systems ( https://nic.at/registrar/4 | [settings-update.at](https://phishdestroy.io/domain/settings-update.at/) | 2026-09-23 | Offline | — | [kraken-zerkalo.at](https://phishdestroy.io/domain/kraken-zerkalo.at/) | 2026-09-22 | Online | Key-Systems ( https://nic.at/registrar/4 | [kra28at.at](https://phishdestroy.io/domain/kra28at.at/) | 2026-09-21 | Online | Edomains ( https://nic.at/registrar/728 | ## Related - [Typosquatting](https://phishdestroy.io/glossary/typosquatting/) - [EPP status codes](https://phishdestroy.io/glossary/epp-status/) - [Newly registered domains: phishing risk](https://phishdestroy.io/newly-registered-phishing-domains) - [Abuse Contact Lookup](https://phishdestroy.io/developer-tools/abuse-contact-lookup) - [All TLDs](https://phishdestroy.io/tld/) Data: PhishDestroy domain-report database, built 2026-10-22. The share is of PhishDestroy reports, not of all .at registrations; first .at report 2025-08-09. Canonical: https://phishdestroy.io/tld/at/