crdclub[.]su

Analysis of the domain crdclub.su indicates an active, high‑risk phishing infrastructure. The domain resolves to the IPv4 address 194.58.112.166 and is served by the Russian registrar REGRU‑SU, which listed the authoritative name servers ns1.reg.ru and ns2.reg.ru. Registration data shows the domain was created on June 29, 2013 and remains active as of the report date, August 05, 2026.

VirusTotal scans have recorded six detections out of ninety‑one participating security vendors, suggesting that multiple scanners have identified malicious characteristics associated with the host. The domain appears on a single security blocklist and is explicitly blocked by the PhishDestroy service, reinforcing its classification as a phishing resource. No additional intelligence such as SSL certificate details, HTTP response codes, Safe Browsing verdicts, OTX references, or page title information is currently available, limiting the depth of behavioural assessment.

Defenders should prioritize blocking traffic to 194.58.112.166 and add crdclub.su to local deny lists. Continuous monitoring of the domain’s resolution and any emergent reputation changes is recommended, as well as periodic rescans with multi‑vendor engines to capture evolving detection patterns. Organizations employing email gateways, web proxies, and endpoint protection should ensure that signatures covering the observed vendor detections are deployed, and incident response teams should be prepared to investigate any user reports that reference this domain.