# krab5c---c.ru — SUSPICIOUS

> krab5c---c.ru is linked to potential phishing activity. Exercise caution as the domain is newly registered and flagged for review.

## Summary
PhishDestroy identifies krab5c---c.ru as a generic phishing domain currently under investigation. The domain was created recently on March 07, 2026, suggesting possible malicious intent tied to its new registration.

The domain resolves to IP 198.251.84.254 and is registered through REGRU-RU. VirusTotal scans show no detections so far, but the combination of recent creation and obscure registrar warrants further scrutiny.

krab5c---c.ru remains active with no confirmed blocks or detections yet. Users are advised to avoid interacting with it until additional intel clarifies its threat level.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: dead (HTTP ?)

## Domain Intelligence
- Registered: 2026-03-07 15:56:44
- Registrar: REGRU-RU
- Country: RU
- IP: 198.251.84.254
- Nameservers: arushi.ns.cloudflare.com arushi.ns.cloudflare.com. shane.ns.cloudflare.com shane.ns.cloudflare.com.

## Detection Status
- VirusTotal: 0 vendors flagged
  Vendors: []
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Screenshot: https://i.ibb.co/xqmxxBQW/c4d8b010acdd.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/b3d37581-8b18-4dec-8ae8-38347f1eb703
- PhishDestroy: https://phishdestroy.io/domain/krab5c---c.ru/
- LLM endpoint: https://phishdestroy.io/domain/krab5c---c.ru/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/krab5c---c.ru/
Last updated: 2026-03-19