krab4-cc[.]ru
“krab4-cc.ru”
Ringkasan bukti
PhishDestroy identifies krab4-cc.ru as a live generic_phishing landing page specifically designed to harvest cryptocurrency exchange credentials. The infrastructure is brand-new, registered on January 07, 2026, and has already begun luring victims via spoofed emails and social-media posts. While VirusTotal currently shows 2/95 detections, the site is actively serving a fraudulent login overlay that mimics a prominent exchange’s authentication flow, thereby exposing victims to direct financial theft.
This domain was flagged on seed 933961 and is hosted at IP 185.149.120.187 (AS44050). It was registered through REGRU-RU on January 07, 2026, and remains unlisted on all major public blocklists (Google Safe Browsing, PhishTank, OpenPhish, URLVoid). VirusTotal analysis returned 2/95 vendor flags as of last scan, indicating minimal detection coverage at this time. The page title is identical to the domain, a common evasion tactic to bypass keyword filters. No HTTPS certificate is visible, increasing the likelihood of man-in-the-middle interception on any submitted data.
Mitigation begins with strict URL verification: never click shortened links promising “bonus deposits” or “account verification.” Bookmark the legitimate exchange URL and navigate exclusively through that path. If a login prompt appears unexpectedly, close the tab and open the site manually. Enable multi-factor authentication on all crypto accounts and use a hardware key or authenticator app rather than SMS where possible. Report the domain to your email provider and block the IP 185.149.120.187 at the network perimeter. Monitor crypto wallets for unauthorized transfers; if compromised, revoke API keys and initiate the exchange’s incident response immediately.
Data Coverage
Intelijen Keamanan Jaringan
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Hagezi Threat Feed | krab4-cc.ru |
malicious | Sinkholed |
Alur Tanggapan Ancaman Pipeline
Cakupan daftar blokir
10 sumber eksternal dipantau · snapshot tersimpan 12/08/2026
Linimasa deteksi
-
Status domain
Dapat dijangkau → Tidak dapat dijangkau
-
Status domain
Tidak dapat dijangkau → Dapat dijangkau
-
Status domain
Dapat dijangkau → Tidak dapat dijangkau
-
Status domain
Tidak dapat dijangkau → Dapat dijangkau
Analisis VirusTotal
Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive