krabb-5-cc[.]ru

The domain krabb-5-cc.ru has been identified as a phishing site targeting users of the Krab5 furniture brand. Analysis confirms this domain as a generic phishing threat, currently offline, designed to deceive visitors into disclosing sensitive information or initiating fraudulent transactions under the guise of a legitimate furniture retailer. The page title, 'Krab5 cc — минималистичная мебель своего производства с доставкой по России,' explicitly mimics the branding and service claims of the authentic Krab5 furniture manufacturer, including delivery services across Russia. Technical indicators reveal multiple red flags. The domain is flagged by 6 of 95 security vendors on VirusTotal, indicating malicious activity detection. Infrastructure analysis shows it resolves to the IP address 193.105.134.224 and was registered on March 28, 2026, suggesting a recently established, short-lived operation. The domain appears on one security blocklist and has been documented in a single threat intelligence pulse. Its Gridinsoft trust score is 0/100, further confirming its malicious nature. The SSL certificate, issued by Let's Encrypt, does not mitigate the threat, as phishing sites frequently use valid certificates to appear legitimate. Current status indicates the domain has been taken offline, reducing immediate risk to users. However, similar infrastructure or copycat domains may emerge. Organizations and individuals are advised to block the domain and its associated IP (193.105.134.224) at the network level. Users who interacted with the site should reset credentials for any accounts accessed during the exposure window, particularly those linked to financial services. Security teams should monitor for related domains registered under the same IP or registrar, as threat actors often reuse infrastructure. Proactive threat hunting for the seed identifier 'de4e8b' in logs may reveal additional compromised endpoints or related malicious activity.