krab4--at[.]ru

Analysis of krab4--at.ru indicates that the domain was registered on 2026-03-28 and is presently taken offline. The domain appears on a single security blocklist and has been explicitly blocked by the PhishDestroy mitigation service. VirusTotal reports that two of ninety‑four scanning engines have raised detections against the domain, confirming the presence of malicious activity consistent with generic phishing.

No additional intelligence such as hosting provider, IP address, SSL certificate details, or page title has been released, leaving the broader infrastructure context uncertain. The limited detection footprint suggests a short‑lived campaign, but the fact that at least two reputable scanners flagged the domain underscores a non‑trivial risk. Defenders should continue to monitor blocklist feeds for any re‑appearance of the domain, enforce outbound filtering to block connections to krab4--at.ru, and consider adding the domain to internal deny lists.

Incident response teams should also review recent logs for any attempted connections to the domain prior to its takedown, as such traffic may indicate compromised endpoints. Ongoing vigilance is advised because the underlying phishing kit or target brand has not been disclosed, and future iterations could reuse similar naming patterns.