cc-krab2[.]ru

Analysis of cc-krab2.ru shows it was registered on 2026-03-28 and currently resolves to 104.21.63.191, a Cloudflare-hosted address located in Canada. The site presents a valid TLS certificate issued by Google Trust Services under the WE1 name, and HTTP requests return a 200 status code, indicating an active web service. VirusTotal records three of ninety-four scanned security vendors flagging the domain, confirming malicious activity. The domain is listed in a single external threat intelligence pulse on AlienVault OTX and appears on one security blocklist. It has been explicitly blocked by the PhishDestroy feed, and Gridinsoft assigns a trust score of 0 out of 100, reinforcing its classification as high-risk generic phishing. The current operational status is active, but no detailed page content or payload analysis is available, leaving the exact phishing vector and targeted brand unspecified. Defenders should immediately add cc-krab2.ru to outbound and inbound block lists, monitor traffic to its resolving IP 104.21.63.191, and enforce TLS inspection to detect any credential submission attempts. Continuous threat-intel feed updates are recommended to capture any new indicators that may emerge from this infrastructure.