pp99990009999[.]duckdns[.]org

The domain pp99990009999.duckdns.org has been identified as a credential theft threat, actively impersonating the financial institution Garanti BBVA. This domain is currently active and poses an elevated risk to potential victims who may be misled into providing sensitive information.

Infrastructure analysis indicates that the domain resolves to the IP address 64.89.160.131. It is registered through Let's Encrypt, which is known for providing free SSL certificates. The domain has been flagged by 7 of 95 VirusTotal vendors, indicating a notable level of concern among security providers. There are currently no entries found on major blocklists, suggesting that it may not yet have been widely recognized as a threat by the broader security community. The creation date of the domain is not provided in the available data, but its use of an SSL certificate from Let's Encrypt suggests it may have been created recently to appear legitimate to unsuspecting users.

Given the current status of pp99990009999.duckdns.org, it is essential for organizations and individuals to exercise caution. Users are advised to avoid engaging with this domain and to report any suspicious communications that may direct them to it. Additionally, regular monitoring for updates on this domain and others like it is recommended, along with the implementation of security measures such as multi-factor authentication to protect sensitive accounts against potential credential theft.