kfcu[.]at

Analysis of the domain kfcu.at indicates active phishing infrastructure targeting Keesler Federal Credit Union, as evidenced by its page title 'Keesler Federal Credit Union — Official Keesler Federal Credit Union Site.' The domain resolves to IP address 45.59.122.205, hosted in Switzerland, and is protected by Cloudflare, which may obscure further origin details. As of July 12, 2026, the site returns an HTTP 200 status, confirming operational availability. Security vendors have flagged this domain, with 14 of 91 engines on VirusTotal detecting malicious activity, and it appears on three blocklists, including PhishDestroy, MetaMask, and SEAL. AlienVault OTX records two threat intelligence pulses associated with this domain, reinforcing its classification as a brand impersonation threat. The SSL certificate is issued by Let's Encrypt, a common choice for both legitimate and malicious sites, and the domain employs HSTS, which may be used to lend false credibility. Defenders should treat this domain as high-risk and prioritize blocking or monitoring access to it. While the exact content and functionality of the site remain unanalyzed, the available indicators align with typical phishing behavior targeting financial institutions. Further investigation into associated infrastructure and registration details may provide additional context, though current data suggests an active and ongoing threat.