raabmosk[.]com

The domain raabmosk.com was registered on May 08, 2026 through HOSTINGER operations, UAB and currently resolves to the IPv4 address 82.197.80.175. DNS resolution is delegated to the authoritative name servers artemis.dns-parking.com and hermes.dns-parking.com, both of which are typical of domains parked on shared hosting platforms. The domain is listed on one public security blocklist and is actively blocked by the PhishDestroy service, indicating that at least one security vendor has identified it as malicious. VirusTotal records show that the domain has been scanned by 91 independent antivirus and URL‑reputation engines; none of those engines reported a detection at the time of scanning, which reflects the current lack of a signature match rather than an assurance of legitimacy.

The campaign is classified as generic phishing, but no specific target brand, page title, or credential‑capture vector has been published in the available intelligence. Consequently, the precise content of the hosted site remains unverified, and no SSL certificate details, HTTP status codes, or page‑level indicators have been disclosed. The domain’s status is marked as active and is under investigation, suggesting ongoing use in malicious operations.

Defenders should consider adding raabmosk.com to deny‑list policies, monitoring DNS queries for the associated name servers, and correlating any outbound connections to the IP address 82.197.80.175 with internal user activity. Additional investigation, such as safe‑browse checks, TLS handshake analysis, and content retrieval, is recommended to determine whether the site is delivering credential‑stealing pages or other malicious payloads. Continuous re‑scanning with multi‑vendor services is advised, as detection signatures may evolve as threat intelligence is updated.