krab-cc[.]com

The domain krab-cc.com has been identified as a generic phishing threat, specifically designed to impersonate the Krab CC platform (often associated with the Russian marketplace Kraken). This site is a classic credential harvesting operation, attempting to trick users into entering sensitive login information. No specific drainer kit has been confirmed, but the page title "Krab CC Официальный сайт Кракен вход" clearly indicates an intent to steal Kraken account credentials.

Technical indicators paint a clear picture of malicious intent. VirusTotal reports 8 out of 95 security vendors flagging this domain, a significant detection rate. The domain was registered on March 28, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar sometimes associated with low-quality or abusive domains. It resolves to IP 172.67.204.58, which is within Cloudflare's range, often used to obscure the true hosting location. The SSL certificate was issued by Google Trust Services (WE1), which is legitimate, but that does not negate the phishing nature. The domain appears on one security blocklist and has been taken offline. Google Safe Browsing (GSB) likely flagged it, though specific status is not shown.

As of now, krab-cc.com is offline, meaning the immediate threat is mitigated. However, users who may have visited the site or entered credentials should take immediate action: change passwords for Kraken and any reused passwords elsewhere, enable two-factor authentication, and monitor accounts for suspicious activity. PhishDestroy recommends avoiding any interaction with this domain and reporting it to relevant authorities. The remaining risk is low due to the domain being offline, but users should remain vigilant against similar phishing attempts targeting cryptocurrency platforms. Always verify URLs directly from official sources before entering sensitive information.