rab3[.]at

rab3.at entered the PhishDestroy evidence set on Feb 8, 2026. The stored content classification is credential phishing. The assembled evidence scores 71/100 (high).

One independent source is positive: VirusTotal. VirusTotal recorded 1 detections among 93 engines: SOCRadar on Jul 18, 2026 at 18:45 UTC. The evidence is not unanimous. The external blocklist snapshot contained no matches on Aug 7, 2026 at 14:20 UTC. Google Safe Browsing returned no flag on Mar 2, 2026 at 20:38 UTC. URLScan completed without a malicious verdict (score 0) on Mar 26, 2026 at 11:29 UTC.

HTTP 301 was recorded on Aug 7, 2026 at 10:23 UTC. Registration records for the domain list Gransy s.r.o. ( https://nic.at/registrar/609 ) as the registrar. At collection time, the hostname resolved to 104.26.3.80 on AS13335 (CLOUDFLARENET - Cloudflare, Inc., US). The associated network metadata labels the endpoint as AS13335 Cloudflare, Inc. in San Francisco, US. The stored server header is cloudflare. DOM analysis completed on Apr 23, 2026 at 03:21 UTC; stored DOM score 71/100. The evidence archive retains 2 visual captures from PhishDestroy and URLScan. IoC extraction completed on Jul 29, 2026 at 02:37 UTC; stored 0 format-validated wallet addresses and 0 Telegram indicators. TLS metadata lists E7 as the certificate issuer with validity through May 21, 2026; checked Mar 15, 2026 at 05:54 UTC.

No page title was retained; the visual captures, not a title string, preserve the landing-page appearance. No target brand has been confirmed from stored page content; hostname wording alone is not treated as brand evidence.