krab1at[.]baikal-avtopodbor[.]ru

The domain krab1at.baikal-avtopodbor.ru is a generic phishing site designed to deceive users into disclosing sensitive information. It does not impersonate a specific brand or employ a known drainer kit. As of the latest verification, krab1at.baikal-avtopodbor.ru has been taken offline, reducing immediate risk but leaving past victims potentially exposed.

Technical indicators confirm the elevated threat level. krab1at.baikal-avtopodbor.ru was flagged by 2 of 95 VirusTotal security vendors, including Fortinet and SOCRadar. The domain was registered through REGRU-RU on March 07, 2025, and resolved to the IP address 193.105.134.30, hosted by AS42237 (w1n ltd) in Sweden. It appeared on 1 security blocklist (PhishDestroy) and lacked an SSL certificate. The observed page title was 'krab1 - AT издательство для малого бизнеса', and Gridinsoft assigned it a trust score of 0/100. Nameservers were ns1.regerey.com and ns2.regerey.com.

Victims of krab1at.baikal-avtopodbor.ru should immediately change any credentials entered on the site, particularly if reused across platforms. Enable two-factor authentication (2FA) on all accounts to mitigate further risk. Monitor financial and personal accounts for unauthorized activity. Report the phishing domain to local cybersecurity authorities, Google Safe Browsing, and the registrar (REGRU-RU) to aid in takedown efforts. If the site was accessed via a link in an email or message, report the sender as phishing to the relevant platform.