krab5cccc[.]ru

This domain, krab5cccc.ru, is flagged as a high-risk generic phishing threat. Registered on March 28, 2026, and still active as of July 12, 2026, the site presents a page titled 'Krab5 CC – Магазин кроссовок | Оригинальные модели и новинки', suggesting a sneaker storefront. However, infrastructure analysis reveals indicators of malicious intent. The domain resolves to IP address 5.23.52.13, hosted in Russia by JSC TIMEWEB, with an SSL certificate issued by Let's Encrypt (E8). VirusTotal reports 3 out of 94 security vendors flagging this domain, and it appears on one security blocklist, including PhishDestroy. AlienVault OTX notes its presence in one threat intelligence pulse, and Gridinsoft assigns a trust score of 0 out of 100. The HTTP status returns 200, confirming the site is live. The exact phishing mechanism has not been analyzed, but the combination of low trust scores, security vendor detections, and listing on blocklists warrants caution. Defenders should block access to this domain and IP 5.23.52.13 at network level, monitor for related subdomains or IP changes, and report to threat intelligence feeds. Users should avoid visiting the site or submitting any personal or financial information.