krab999[.]ru

PhishDestroy identifies krab999.ru as a credential harvesting phishing domain actively impersonating legitimate services to steal user login details. This domain resolves to IP 188.114.97.3, registered through RU-CENTER-RU on January 27, 2026, and hosts a fraudulent site designed to mimic popular online platforms. The malicious infrastructure leverages a Google Trust Services SSL certificate to appear legitimate, tricking visitors into entering sensitive information. Evidence confirms elevated risk: just 1 out of 95 VirusTotal security vendors currently flags this domain, highlighting how new and undetected this threat remains. The domain was created recently (January 27, 2026), suggesting attackers are operating with fresh infrastructure to avoid established blocklists. Despite its low detection rate, the presence of a valid SSL certificate and recent registration date make this a particularly deceptive threat vector for unsuspecting users. If you visited krab999.ru, immediately change passwords for any accounts entered on the site and scan your device for malware using updated antivirus tools. Report the domain to your security team or browser vendor to help block future access. Avoid interacting with this domain entirely—its sole purpose is to harvest credentials and compromise user accounts.