krab5--cc-c[.]ru
“Krab5 cc — строительные расходные материалы и снабжение объектов в Москве”
Ringkasan bukti
The domain krab5--cc-c.ru was registered on 20 February 2026 through the Russian registrar REGRU‑RU. Its authoritative name servers are elijah.ns.cloudflare.com and emely.ns.cloudflare.com, both hosted by Cloudflare, and the domain resolves to the IP address 188.114.97.3, which is part of the Cloudflare network. Independent scanning on VirusTotal returned four positive detections out of ninety‑one submitted security engines, indicating that multiple vendors have identified malicious activity associated with this host.
The domain is listed on a single public blocklist and has been actively blocked by the PhishDestroy sinkhole, confirming that it is being used in a phishing campaign. No additional telemetry such as SSL certificate details, HTTP response codes, page titles, or content snapshots have been published, so the exact luring technique and targeted brand remain unknown. Infrastructure analysis shows no anomalous ASN or geographic shifts beyond the Cloudflare edge location, suggesting the attacker is leveraging a standard CDN to obscure origin.
Defenders should add krab5--cc-c.ru to URL filtering and DNS block policies, monitor traffic to 188.114.97.3 for suspicious authentication attempts, and enforce multi‑factor authentication for any credentials potentially harvested through this vector. Ongoing collection of web payloads and user‑reporting will be required to refine the threat profile and to confirm the specific phishing lure employed.
Data Coverage
Alur Tanggapan Ancaman Pipeline
Cakupan daftar blokir
10 sumber eksternal dipantau · snapshot tersimpan 13/08/2026
Linimasa deteksi
-
VirusTotal
2 → 4
Intelijen Domain
Detail teknisDNS, nama TLS, dan stempel waktu
Teknologi
1 teknologi dengan keyakinan tinggi teridentifikasi
Analisis VirusTotal
Analisis Performa Situs
Google PageSpeed Insights — mobile performance audit of krab5--cc-c.ru · checked Jul 29, 2026
Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive