# krab-1---------cc.ru — SUSPICIOUS

> krab-1---------cc.ru crypto drainer domain flagged by 1 of 95 VirusTotal scanners. Registered December 9, 2025 via REGRU-RU. Do not connect wallets.

## Summary
PhishDestroy identifies krab-1---------cc.ru as an active crypto-draining scam that lures victims with fake cryptocurrency giveaways. When visitors connect a digital wallet, the site silently approves malicious token approvals that allow attackers to drain funds without further interaction. This type of attack is known as a “crypto drainer” and is increasingly used against users who expect to receive tokens but instead lose everything in their wallet.  This domain was flagged by PhishDestroy after VirusTotal’s engine detected the page on December 09, 2025. The domain resolves to IP address 186.2.175.37 and was registered through REGRU-RU, a Moscow-based registrar known for hosting a high volume of scam infrastructure. The low detection count (1/95 scanners) highlights how quickly these sites appear and disappear, making traditional blacklists unreliable as a sole defense.  If you visited krab-1---------cc.ru, immediately revoke any wallet approvals you granted to the site using tools like revoke.cash or similar blockchain explorers. Do not interact with the page further. Scan your device with updated antivirus software and consider rotating wallet credentials if you entered any private keys or seed phrases. Report the domain to your wallet provider and local cybercrime units to help disrupt the campaign.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)
- Page title: krab-1---------cc.ru

## Domain Intelligence
- Registered: 2025-12-09 11:26:37
- Registrar: REGRU-RU
- IP: 186.2.175.37

## Detection Status
- VirusTotal: 1 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/652ad00b-1bfe-4f91-88ce-89447a6c0562
- PhishDestroy: https://phishdestroy.io/domain/krab-1---------cc.ru/
- LLM endpoint: https://phishdestroy.io/domain/krab-1---------cc.ru/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/krab-1---------cc.ru/
Last updated: 2026-03-28