Notification and current-status evidence
The sent-report ledger records the first outgoing report at . A report was sent to the recorded registrar; contact details remain in Domain Intelligence. The latest stored availability evidence still shows the domain reachable; 6 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
krab--5----cc[.]ru
“Krab5 CC | Онлайн агрегатор по созданию сайтов!”
Zusammenfassung der Beweislage
Analysis of krab--5----cc.ru shows a confirmed brand‑impersonation campaign targeting the cryptocurrency exchange Kraken. The domain was registered on 21 February 2026 through RU‑CENTER‑RU and resolves to IP 186.2.175.37, which is announced by AS59692 (IQWeb FZ‑LLC) and geolocated to Belarus. The host returns HTTP 502, indicating the web service is currently unavailable, and the site is marked as offline. A Let’s Encrypt R12 certificate covers the domain, confirming TLS is in use despite the service disruption. Cloudflare nameservers (marjory.ns.cloudflare.com and terry.ns.cloudflare.com) are configured, suggesting the operators leveraged Cloudflare’s CDN and DNS protection.
The page title discovered during a prior fetch reads “Krab5 CC | Онлайн агрегатор по созданию сайтов!”, a generic Russian‑language phrase that does not reference Kraken, but the documented scam type explicitly lists brand impersonation of Kraken. Technical footprints include Yandex.Metrika analytics and DDoS‑Guard protection, both common in malicious Russian‑hosted sites. VirusTotal scans flagged the domain by 2 of 93 vendors, and Gridinsoft assigns a trust score of 0 / 100. Independent blocklists and security services (PhishDestroy, MetaMask, SEAL) have already listed the domain, and it appears on three additional blocklists.
The combination of low trust scoring, vendor detections, and active blocklisting indicates a high probability of malicious intent. Uncertainty remains around the exact payload or credential‑harvesting mechanisms because the site is offline and no page content has been captured. Defenders should continue to block the domain at perimeter and DNS layers, monitor the hosting IP for related activity, and update incident response playbooks to include Kraken‑related impersonation vectors. Threat intelligence feeds should be refreshed with the domain’s identifiers to ensure rapid detection of any re‑use of the same infrastructure.
Momentaufnahme der übermittelten Beweise
- Gesendet
- Protokolleinträge
- 1
- Fall-ID
PD-20260202-91B0BD- Titel der erfassten Seite
- Krab5 CC | Онлайн агрегатор по созданию сайтов!
- PDF-Artefakt
- PDF-Beweis
Rechtsgrundlage
Vollständiger Beweistext
Section 3.1 of the AUP: The domain krab--5----cc.ru is engaged in phishing activities, which directly contravenes your policy prohibiting illegal activities and fraud.
Section 4.2 of the TOS: The domain is being used to deceive individuals into providing sensitive information, thereby violating your terms regarding fraudulent behavior.
Applicable Laws (Unknown):
Computer Fraud and Abuse Act (CFAA): This U.S. law prohibits unauthorized access to computers and networks, which applies to phishing schemes that exploit user data.
Wire Fraud Statute (18 U.S.C. § 1343): This law criminalizes schemes to defraud individuals or entities via electronic communications, which is relevant to the activities associated with this domain.
Anti-Phishing Consumer Protection Act: This act aims to combat phishing and related fraud, making it illegal to engage in deceptive practices online.
Regulatory Note: Failure to take immediate action against this domain may result in regulatory scrutiny and potential liability under applicable laws. Compliance with your AUP and TOS is essential to mitigate risks associated with hosting fraudulent content.
Data Coverage
Pipeline zur Reaktion auf Sicherheitsbedrohungen
Blocklistenabdeckung
10 überwachte externe Feeds · gespeicherter Stand 13.08.2026
Erkennungszeitleiste
-
Domainstatus
Erreichbar → Nicht erreichbar
-
Domainstatus
Nicht erreichbar → Erreichbar
-
Domainstatus
Erreichbar → Nicht erreichbar
-
Domainstatus
Nicht erreichbar → Erreichbar
Technologien
2 Technologien mit hoher Konfidenz erkannt
VirusTotal-Analyse
Website-Performanceanalyse
Google PageSpeed Insights — mobile performance audit of krab--5----cc.ru · checked Mar 6, 2026
Wurden Sie von dieser Website betroffen?
Wenn Sie Kontoanmeldeinformationen, persönliche oder Zahlungsinformationen eingegeben oder eine Datei von dieser Domain heruntergeladen haben, ergreifen Sie sofort Maßnahmen. Nachfolgend finden Sie Ressourcen, die Ihnen helfen, den Vorfall zu melden und sich zu schützen.
Melden Sie sich bei Ihren örtlichen Behörden
Wählen Sie Ihr Land aus, um Offizielle Kontakte im Bereich Cyberkriminalität oder einen Beschwerdeentwurf erstellen → zu erhalten.
Jede beliebige Domain prüfen
Bedrohungsanalyse anhand gespeicherter Blocklisten, WHOIS, DNS und öffentlicher Scan-Beweise
Jetzt scannenPhishing melden
Melden Sie verdächtige Domains an unsere Bedrohungsdatenbank – schützen Sie die Community
MeldenEchtzeit-Bedrohungsfeed
Aktuelle Phishing-Meldungen und beobachtete Verfügbarkeitsänderungen
ÜberwachenBleiben Sie auf dem Laufenden, bleiben Sie sicher
Beobachten Sie aktuelle Bedrohungen oder legen Sie Widerspruch gegen diesen Eintrag ein, wenn Sie der Meinung sind, dass es sich um einen Fehlalarm handelt