events-krosmopack[.]info

The domain events-krosmopack.info was registered on February 21, 2026 and is currently taken offline. Infrastructure analysis shows the domain resolves to the IPv4 address 45.148.121.52, which is allocated to AS62068 SpectraIP B.V. in the Netherlands. The host presents a ZeroSSL RSA Domain Secure Site CA certificate, a free‑issued SSL that does not provide any assurance of legitimacy. Reputation data indicate the domain is listed on a single security blocklist and has been flagged by PhishDestroy as malicious.

VirusTotal scans report that 15 of 93 security vendors classify the domain as suspicious, demonstrating moderate consensus among detection engines. Gridinsoft assigns the domain a trust score of 0 out of 100, reinforcing its low credibility. AlienVault OTX includes the domain in one threat‑intelligence pulse, confirming that it has been observed in the wild.

No page title or brand‑specific content has been disclosed, and the exact phishing lure remains undefined. Defenders should proactively block the domain and its associated IP address at perimeter firewalls, DNS resolvers, and endpoint protection solutions. Continuous monitoring of the IP range 45.148.121.0/24 for similar activity is recommended, and security teams should update URL filtering and threat‑intel feeds to incorporate this indicator while investigating any related email or web‑based incidents.