csst[.]at

This domain, csst.at, was registered on 2026-03-05 through Hosting Concepts B.V. d/b/a Registrar.eu and is currently active. The site presents the page title "Un instant…", returns an HTTP 403 status, and is served over TLS using a certificate issued by Google Trust Services under the WE1 hierarchy. Infrastructure analysis shows the domain resolves to 104.26.12.166, an address owned by Cloudflare, Inc. (AS13335) and located in the United States. DNS is delegated to corey.ns.cloudflare.com and hattie.ns.cloudflare.com. The domain appears on a single security blocklist and has been blocked by PhishDestroy. Reputation scoring from Gridinsoft assigns a trust score of 1 out of 100. VirusTotal reports three detections out of ninety‑four scanners. The combination of a low trust score, recent registration, TLS certificate from a widely trusted authority, and the presence of a generic phishing classification indicates a high‑risk indicator for credential‑stealing campaigns. Defenders should add csst.at to inbound and outbound filtering rules, monitor DNS queries for the associated Cloudflare nameservers, and consider sandboxing any payloads that reference the 104.26.12.166 address. Continuous threat‑intel feeds should be consulted for any future detections, and the domain should be kept on blocklists until the campaign is fully mitigated.