krab-4c-c[.]ru

The domain krab-4c-c.ru is a generic phishing site posing an elevated risk of credential theft or fraudulent transactions. It does not impersonate a specific brand or deploy a known crypto drainer kit. As of the latest verification, krab-4c-c.ru has been taken offline, but prior activity indicates it was actively used for phishing purposes.

Technical indicators show krab-4c-c.ru was flagged by 2 of 95 VirusTotal security vendors, including Gridinsoft and SOCRadar. The domain was registered through REGRU-RU on February 21, 2026, and resolved to the IP address 198.251.84.33, hosted by FranTech Solutions in the US. It appeared on one security blocklist (PhishDestroy) and lacked an SSL certificate. The observed page title, 'krab4 cc — интернет-магазин светодиодного и умного освещения в Москве,' suggests an attempt to mimic a legitimate e-commerce site. Technologies detected include Nginx and Yandex.Metrika, with nameservers arturo.ns.cloudflare.com and cass.ns.cloudflare.com.

Users who interacted with krab-4c-c.ru should immediately change any credentials entered on the site, enable two-factor authentication on affected accounts, and monitor for unauthorized transactions or identity fraud. Report the domain to local cybersecurity authorities, Google Safe Browsing, or platforms like PhishTank to aid in broader takedown efforts. If financial or crypto assets were exposed, contact the relevant institution for further guidance.