krab--4----at[.]ru

PhishDestroy has assessed krab--4----at.ru with an elevated risk level, identifying it as a sophisticated credential theft operation disguised as an online store for home filming equipment in Moscow. The domain was created on February 21, 2026, and registered through REGRU-RU, a Russian registrar. It resolves to IP 198.251.84.33, which has no associated SSL certificate, a red flag for any site handling sensitive information. VirusTotal shows 2 out of 95 security vendors flagging this domain, and it appears on one security blocklist. These indicators collectively suggest a well‑planned phishing campaign targeting unsuspecting shoppers.

The domain’s title, “krab4.at — интернет-магазин оборудования для домашней съёмки в Москве,” is designed to appear legitimate, but the lack of HTTPS encryption and its presence on threat intelligence feeds reveal its true purpose. The absence of an SSL certificate means any data submitted—including login credentials or payment details—would be transmitted in plain text, easily intercepted by attackers. The domain is now offline, but similar sites may appear under different names.

Users who may have interacted with this domain should immediately change any passwords used on the site and monitor their financial accounts for unauthorized transactions. Enabling two‑factor authentication on all accounts is strongly recommended. PhishDestroy advises avoiding any unsolicited links to equipment stores and verifying merchant authenticity through independent reviews and official contact channels before making purchases.