# cc-krab1.ru — SUSPICIOUS

> cc-krab1.ru mimics an online fashion store offering clothing capsules and basics. Stay informed and avoid potential phishing risks with this suspicious domain.

## Summary
PhishDestroy identifies cc-krab1.ru as a generic phishing domain impersonating an online clothing retailer focused on fashion capsules and basic wardrobes. The domain’s page title suggests it poses as a legitimate fashion sales platform but is flagged for deceptive intent.

Technical indicators reveal the domain was registered recently on February 21, 2026, through REGRU-RU and resolves to IP address 104.21.14.236. Although only 2 out of 95 security vendors on VirusTotal flagged this domain and it appears on one security blocklist, the low detection ratio combined with its categorization raises caution. The infrastructure used is typical of phishing setups, aiming to mimic trustworthy e-commerce sites.

Currently, cc-krab1.ru is offline, which reduces immediate risk to users. However, the domain remains documented in phishing databases to inform users and security systems. PhishDestroy recommends vigilance and advises against interacting with this site or providing personal information if it reappears.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: dead (HTTP 403)
- Page title: Krab1 CC — подборка одежды и продажа: капсулы, базовый гардероб

## Domain Intelligence
- Registered: 2026-02-21 07:01:08
- Expires: 2027-01-30 00:00:00
- Registrar: REGRU-RU
- Country: RU
- IP: 104.21.14.236
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: sureena.ns.cloudflare.com sureena.ns.cloudflare.com. woz.ns.cloudflare.com woz.ns.cloudflare.com.
- SSL Issuer: none

## Detection Status
- VirusTotal: 2 vendors flagged
  Vendors: ["Gridinsoft", "SOCRadar"]
- Google Safe Browsing: clean
- Blocklists: 1 hits
  Lists: ["PhishDestroy"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019bd6de-d3a9-7189-95c4-b5c26bc818f3.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/2e5abc7f-9e25-46dc-a1d5-d0c30fd39c4c
- PhishDestroy: https://phishdestroy.io/domain/cc-krab1.ru/
- LLM endpoint: https://phishdestroy.io/domain/cc-krab1.ru/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/cc-krab1.ru/
Last updated: 2026-03-19