krab24cc[.]at

The domain krab24cc.at was registered on March 28, 2026 and is currently listed as offline, returning an HTTP 403 status code. PhishDestroy has already taken the domain offline, and it appears on a single security blocklist. VirusTotal analysis shows that three of ninety-four security vendors flagged the domain, indicating a measurable level of suspicion among scanning engines.

The limited detection coverage suggests that the domain may have been short-lived or that its malicious content was not fully captured before takedown. No additional infrastructure details such as IP address, autonomous system number, hosting provider, or SSL certificate information are available in the current intelligence set, and the page title or any brand targeting has not been disclosed. Because the domain is not actively serving content, immediate risk to end users is reduced, but the presence of vendor detections and its inclusion on a blocklist demonstrate that threat actors intended to use krab24cc.at for phishing operations.

Defenders should continue to block the domain at network perimeters, ensure it is added to internal DNS blacklists, and monitor for any re-registration or resurrection of the same name. Security teams should also incorporate the three vendor detection signatures into intrusion detection system rules to catch any residual traffic. Ongoing vigilance is advised, as threat actors often recycle similar naming patterns or pivot to related domains after a takedown.