krab6--cc[.]ru

Analysis of krab6--cc.ru shows an active domain registered through RU-CENTER-RU on January 28, 2026. The domain resolves to the Cloudflare edge address 172.67.205.60 and is served by the nameservers amos.ns.cloudflare.com and kay.ns.cloudflare.com. No public page content has been disclosed; therefore the exact phishing lure and any targeted brand remain unverified.

The domain appears on a single security blocklist and is actively blocked by PhishDestroy, indicating that at least one external sinkhole has identified it as malicious. VirusTotal records reveal that the domain was scanned by 91 antivirus and URL‑reputation vendors, none of which currently flag it, but the absence of detections does not constitute a safety guarantee. The lack of additional intelligence such as SSL certificate details, HTTP response codes, or page title limits the current confidence in attributing a specific campaign to the infrastructure.

Defenders should treat the domain as hostile: block outbound connections to 172.67.205.60 when associated with krab6--cc.ru, ingest the indicator into URL filtering and intrusion‑prevention systems, and monitor for any login credential submissions targeting the domain. Continuous re‑query of reputation services and periodic retrieval of the site’s HTML content are recommended to detect any evolution in the payload or the emergence of a targeted brand in the phishing lure.