krab10ccc[.]ru

PhishDestroy identifies active phishing infrastructure targeting gaming credentials at the domain krab10ccc.ru, classified under the threat category 'generic_phishing'. The campaign is currently classified with a risk level of 'under_investigation' and remains in active operation. krab10ccc.ru was registered on January 27, 2026 through RU-CENTER-RU and resolves to the IP address 172.67.170.37. At the time of analysis, the domain had received 0 detections out of 95 VirusTotal vendors and possessed a valid SSL certificate issued by Google Trust Services. The domain’s age and the lack of detection flags suggest it is either newly operational or deliberately evading detection mechanisms. No third-party blocklist data was available during the assessment window. While the specific brand being impersonated has not been confirmed, the domain’s naming convention and recent creation strongly indicate a campaign designed to harvest user credentials under false pretenses. Given the absence of proactive detection and the domain’s high-risk characteristics, users are advised to avoid interacting with krab10ccc.ru and report any observed phishing activity. Organizations should implement network-level blocking of the domain and associated IP address (172.67.170.37) to mitigate potential compromise. Continuous monitoring is recommended due to the domain’s active status and evolving threat landscape.