krab1cc-rur[.]ru

The domain krab1cc-rur.ru presents itself as a site for home tool storage and organizing work items, based on its page title "Krab1 cc — домашнее хранение инструментов и упорядочивание рабочих мелочей." Despite this benign description, the domain poses a threat as it is flagged by multiple security vendors, indicating malicious activity such as malware distribution or phishing. The low GridinSoft trust score of 0/100 and its presence on one blocklist further support its threat potential.

Technical evidence shows the site has 7 detections out of 95 VirusTotal vendors, flagged by alphaMountain.ai, CyRadar, Fortinet, Gridinsoft, and Seclookup. It was registered with REGRU-RU on 2025-12-31, hosted on IP 185.208.158.29 in Switzerland (CH) under AS42624 Global-Data System IT Corporation. The domain uses nameservers ns1.reg.ru and ns2.reg.ru, has no SSL certificate, and is currently offline.

The domain is currently down or offline, which reduces immediate risk but does not eliminate the threat, as it may be reactivated. The risk level is high due to multiple vendor flags, a zero trust score, and recent registration, indicating a likely malicious intent despite the legitimate-sounding title.