# krab1-at-cc.ru — SUSPICIOUS

> Danger! krab1-at-cc.ru is a fake login page stealing credentials. VirusTotal flags 1/95 vendors. Verify safety now on PhishDestroy.

## Summary
PhishDestroy identifies krab1-at-cc.ru as an active fake login page designed to harvest user credentials. This domain is currently categorized under generic_phishing due to its deceptive nature and intent to mimic legitimate login portals. Security researchers and users should exercise extreme caution when encountering this domain, as it poses a direct threat to personal and sensitive information.  This domain was flagged with an elevated risk level and is actively resolving to IP address 172.67.130.223. PhishDestroy’s intelligence shows that the domain was registered through RU-CENTER-RU and was created on December 16, 2025. VirusTotal’s analysis indicates that only 1 out of 95 security vendors currently detect this malicious domain, highlighting its stealthy nature. The presence of a Google Trust Services SSL certificate further enhances its credibility, potentially tricking users into believing it is a legitimate site. Given its recent creation and low detection rate, this domain represents a growing threat to unsuspecting visitors.  If you have visited krab1-at-cc.ru, immediately change any passwords or credentials you may have entered on the site. Disconnect from the internet if possible to prevent further data exfiltration. Run a full antivirus scan on your device to check for any potential malware or unauthorized access. Report the domain to PhishDestroy or your local cybersecurity authority to help block it for others. Always verify the legitimacy of websites, especially those requesting sensitive information, by checking trusted sources or using tools like PhishDestroy’s domain checker.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2025-12-16 09:32:13
- Registrar: RU-CENTER-RU
- IP: 172.67.130.223

## Detection Status
- VirusTotal: 1 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/69ab6a15-d12d-4df1-837a-f750457ff693
- PhishDestroy: https://phishdestroy.io/domain/krab1-at-cc.ru/
- LLM endpoint: https://phishdestroy.io/domain/krab1-at-cc.ru/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/krab1-at-cc.ru/
Last updated: 2026-03-28