kra26[.]at

Technical Threat Report: kra26.at

The domain kra26.at presents a page titled "Just a moment..." which typically indicates a browser verification or challenge page, often used to obfuscate the site's actual content or intent. Based on its detection by multiple security vendors and low trust score, this site poses a potential threat as a malicious or fraudulent domain, possibly involved in phishing, malware distribution, or scam operations. The domain's association with Cloudflare infrastructure and recent creation date further suggests a transient or high-risk operation.

Technical evidence shows the domain has been flagged by 4 out of 95 VirusTotal vendors, including alphaMountain.ai, Fortinet, SOCRadar, and Webroot, and is listed on one blocklist. It is registered through Docky /Huang Chao Ming (registrar ID 723), created on 2026-03-02, and hosted on IP 172.67.189.9 in the United States under AS13335 (Cloudflare, Inc.). The SSL certificate is issued by Google Trust Services (WE1), and nameservers are doug.ns.cloudflare.com and sarah.ns.cloudflare.com.

The domain is currently BANNED, indicating active mitigation. GridinSoft trust rating is 0 out of 100, and the DOM risk score is 66, reflecting a high probability of malicious activity. The combination of recent creation, low detection ratio, and use of Cloudflare for IP obfuscation elevates the risk level for users accessing this site.