kra-b4--cc[.]ru

The domain kra-b4--cc.ru was registered on March 28, 2026 and is currently classified as a generic_phishing threat with a high risk rating. Infrastructure analysis shows the domain resolves to IP address 185.12.94.244, hosted by RuWeb LLC in Russia, and presents a valid TLS certificate issued by Let’s Encrypt (E8). An HTTP request returns status 200 and the page title "krab4 cc - Проверенная Рабочая Ссылка". The domain is listed on one security blocklist and has been blocked by PhishDestroy. Threat intelligence from AlienVault OTX indicates inclusion in eight pulses, and Gridinsoft assigns a trust score of 0 out of 100. VirusTotal analysis recorded a single positive detection out of ninety-four scanners. While the page content has not been publicly examined, the observed indicators—recent registration, Russian hosting, active TLS, and detection by multiple intelligence sources—support the active phishing assessment. Defenders should add kra-b4--cc.ru to deny lists, monitor DNS queries for the associated IP, and consider sinkholing the address to disrupt further malicious activity. Continued observation is advised to capture any evolving payloads or credential harvesting mechanisms that may be deployed.