krab----4-cc[.]ru

This domain, krab----4-cc.ru, is identified as a credential theft operation impersonating a legitimate Moscow-based outdoor equipment retailer. Analysis indicates the site was designed to harvest user login credentials and payment information through deceptive storefront interfaces. Current status is offline, though prior activity suggests targeted credential acquisition rather than generic phishing attempts. Infrastructure analysis reveals the domain was registered on February 21, 2026, through REGRU-RU, resolving to IP address 198.251.84.33. Security telemetry shows 3 of 95 vendors on VirusTotal flagged the domain as malicious, while it appears on one security blocklist with classification by PhishDestroy. The page title, 'krab4.cc — интернет-магазин туристического снаряжения в Москве,' closely mimics legitimate retail language to establish false credibility. The domain has been taken offline, but residual risk persists for users who may have interacted with it during its active period. Organizations are advised to block the domain and associated IP at perimeter defenses, monitor for credential reuse attempts, and alert affected users to reset passwords for any accounts accessed during the exposure window. Network logs should be reviewed for connections to 198.251.84.33 to identify compromised endpoints requiring remediation.