krab45cc[.]at

krab45cc.at was observed in a single security blocklist and is presently listed as offline. The domain was registered on March 28, 2026, and an HTTP request to the host returns a 403 status code, confirming that direct access is denied. VirusTotal records indicate that one of ninety‑four scanning engines flagged the domain, providing a concrete malicious indication.

The blocklist entry attributes the detection to PhishDestroy, a reputable anti‑phishing feed that classifies the domain as a generic phishing site. No further infrastructure details such as registrar, IP address, hosting provider, SSL certificate, or page title are present in the current intelligence set, leaving the broader hosting environment and any associated infrastructure unconfirmed. The limited evidence suggests that the domain was likely employed for a short‑lived phishing campaign before being taken offline, but the absence of additional artifacts prevents definitive attribution of the underlying threat actor or toolkit.

Defenders should continue to block krab45cc.at at DNS and network perimeter layers, incorporate the single vendor detection into existing phishing detection rules, and monitor for any reappearance of the domain or related sub‑domains. Organizations that may have received recent communications referencing the domain are advised to treat any embedded links as malicious and to ensure appropriate user‑education and email filtering mechanisms are in place. Ongoing vigilance is recommended to capture any future activity that may reuse the same naming pattern or infrastructure.