krab1cc[.]pro

The domain krab1cc.pro has been identified as a generic phishing domain. It is currently active and poses an elevated risk. The domain does not appear to be associated with a specific brand or drainer kit, but it is suspected of hosting a fake login page, as indicated by the page title 'Магазин' (Store).

Technical analysis reveals that krab1cc.pro has a VirusTotal detection score of 11/95, indicating that 11 out of 95 security vendors flag this domain as malicious. The domain is registered through NICENIC INTERNATIONAL GROUP CO., LIMITED and was created on March 27, 2026. It resolves to the IP address 185.149.120.187 and is protected by DDoS-Guard and Cloudflare, which can obscure the true infrastructure and make it more resilient to takedown efforts. The SSL certificate is issued by Let's Encrypt, a common choice for phishing sites to appear more legitimate. The domain appears on one security blocklist and has a Gridinsoft trust score of 0/100, indicating a complete lack of trustworthiness.

Currently, the domain is active and remains a significant threat. It is recommended that users avoid accessing this domain and report any suspicious activity to their security teams. Network administrators should consider blocking this domain and IP address to prevent potential phishing attacks. Despite the domain being blocked by PhishDestroy, the remaining risk is high due to the use of multiple protective technologies and the relatively low detection score, which suggests some security vendors may not yet recognize the threat.