krabb5-cc[.]ru
“krab5.cc”
证据摘要
PhishDestroy identifies krabb5-cc.ru as an active credential phishing domain impersonating PayPal services, classified under generic_phishing with a current status of under_investigation.
This domain was registered on February 05, 2026, and is flagged by 0 of 95 VirusTotal vendors as of current analysis. It resolves to IP 104.21.32.238 and utilizes a Google Trust Services SSL certificate. The domain is registered through REGRU-RU and remains undetected by mainstream security vendors despite active hosting.
Current status indicates this campaign is ongoing, with no active blocklist inclusions at this time. Users are strongly advised to avoid interacting with this domain, particularly for financial transactions or login prompts. If exposure occurs, disconnect from the session immediately, scan local systems for malware, and report the domain to your organization’s security team and relevant phishing reporting platforms. Organizations should consider proactive blocking of the domain and associated IP to mitigate potential credential harvesting attempts.
Data Coverage
威胁响应 Pipeline
阻止列表覆盖
监控中的外部数据源 10 个 · 已存快照 2026年8月13日
VirusTotal 分析
网站性能分析
Google PageSpeed Insights — mobile performance audit of krabb5-cc.ru · checked Mar 29, 2026
您是否受到本网站的影响?
如果您输入了帐户凭据、个人或付款信息,或者从此域下载了文件,请立即采取措施。以下资源可帮助您报告事件并保护自己。
检查任意域名
使用存储的阻止列表、WHOIS、DNS 和公共扫描证据进行威胁分析
立即扫描举报网络钓鱼
将可疑域名提交至我们的威胁数据库——保护社区
报告实时威胁动态
最近的网络钓鱼报告和观察到的可用性变化
监控