kreab11[.]at

The domain kreab11.at is an active generic phishing site posing an elevated risk of credential theft or financial fraud. It does not impersonate a specific brand and has no known association with a crypto drainer kit. As of the latest verification, kreab11.at remains operational and continues to host phishing content.

Technical indicators confirm kreab11.at was registered on March 11, 2026, through Gransy s.r.o. (registrar ID 609). It resolves to the IP address 104.21.45.209, hosted on Cloudflare’s network (AS13335) in the United States. The domain is flagged by 1 of 95 VirusTotal security vendors and appears on 1 security blocklist (PhishDestroy). No SSL certificate is present, and the observed page title reads 'Just a moment...'. Nameservers are julio.ns.cloudflare.com and violet.ns.cloudflare.com, with Cloudflare and HTTP/3 technologies detected.

Users who may have interacted with kreab11.at should immediately change any exposed credentials, enable two-factor authentication on all accounts, and monitor for unauthorized access or fraudulent transactions. Report the domain to Google Safe Browsing, PhishTank, or local cybersecurity authorities. If financial or crypto accounts were accessed, revoke token approvals and transfer funds to a new, secure wallet. Avoid reusing passwords and verify the legitimacy of any unexpected communications.