krab1-cc[.]kolosok37[.]ru
krab1-cc.kolosok37.ru — Contenido no disponible. Resumen de las pruebas: VirusTotal 1/93 (SOCRadar); Google Safe Browsing flagged; PhishDestroy score 80/100. Registrador: REGRU-RU.
El análisis detallado de PhishDestroy AI se mantiene en inglés para conservar el registro forense original.
Analysis of krab1-cc.kolosok37.ru shows that the domain was created on 29 July 2025 through the REGRU‑RU registrar and is hosted on the IP address 91.236.116.210, which belongs to ASN42237 (w1n ltd) located in Sweden. The domain resolves to this IP and uses the nameservers ns1.regerey.com, ns1.regerey.com., ns2.regerey.com and ns2.regerey.com. No TLS certificate is presented, indicating unencrypted HTTP only. Google Safe Browsing classifies the site as social engineering, and one of ninety‑three VirusTotal scanners flagged the domain, confirming malicious intent.
The Gridinsoft trust score is 0 out of 100, and the domain appears on a single security blocklist. PhishDestroy has already blocked the domain, and the current operational status is offline. The risk level has been assigned as elevated. The available evidence points to a generic phishing infrastructure that was active at least until the recent takedown.
Because the domain is no longer reachable, real‑time content analysis is not possible, and the specific phishing landing page or targeted brand remain unknown. However, the combination of a zero trust score, Safe Browsing social‑engineering flag, and a positive VirusTotal detection provides sufficient confidence to label the domain as a confirmed phishing site. Defenders should continue to block the domain and its associated IP address in network filters, add the observed nameservers to watch lists, and monitor for any re‑use of the underlying hosting infrastructure. Threat‑intel feeds should be updated to reflect the domain’s status and its elevated risk rating, and any future DNS queries for krab1-cc.kolosok37.ru should be logged and investigated.
Proceso de respuesta ante amenazas Pipeline
Estado de la lista de bloqueados pública
Inteligencia de dominios
Detalles técnicosDNS, SAN de SSL, marcas de tiempo
Análisis de VirusTotal
Datos y informes externos
¿Te ha afectado esta página web?
Si ingresó credenciales de cuenta, información personal o de pago, o descargó un archivo de este dominio, tome medidas inmediatas. A continuación encontrará recursos que le ayudarán a informar el incidente y protegerse.
Informa a las autoridades locales
Seleccione su país para obtener contactos oficiales de cibercrimen o crear un borrador de queja →.
Comprobar cualquier dominio
Análisis de amenazas utilizando listas de bloqueo almacenadas, WHOIS, DNS y evidencia de escaneo público
Escanear ahoraDenunciar un intento de phishing
Envía los dominios sospechosos a nuestra base de datos de amenazas: protege a la comunidad
DenunciarFlujo de amenazas en tiempo real
Informes de phishing recientes y cambios de disponibilidad observados
MonitorizarMantente informado, mantente a salvo
Supervisa las amenazas en tiempo real o impugna esta entrada si crees que se trata de un falso positivo.