krab1[.]us

The domain krab1.us is a generic phishing site that does not impersonate a specific brand or deploy a known drainer kit. It poses an elevated risk by attempting to harvest user credentials or other sensitive information through deceptive means. As of the latest verification, krab1.us has been taken offline, though prior activity indicates it was actively used for phishing campaigns.

Technical indicators show that krab1.us was flagged by 8 of 95 VirusTotal security vendors, including ADMINUSLabs, alphaMountain.ai, and Certego. The domain was registered through Key-Systems GmbH on December 12, 2025, and resolved to the IP address 104.21.30.190, hosted on Cloudflare's infrastructure (AS13335). It appeared on one security blocklist (PhishDestroy) and was referenced in three AlienVault OTX threat intelligence pulses. No SSL certificate was issued for the domain, and its observed page title was 'Новая ссылка на krab1.cc'. The domain used Cloudflare nameservers: aleena.ns.cloudflare.com and jay.ns.cloudflare.com.

Users who may have interacted with krab1.us should immediately change any credentials entered on the site, particularly if reused across other platforms. Enable two-factor authentication (2FA) on all accounts as an additional security measure. Monitor financial and login activity for signs of unauthorized access or fraud. To report the domain, submit it to platforms like Google Safe Browsing, PhishTank, or local cybersecurity authorities. If the site was accessed via a link in an email or message, report the sender as phishing to the relevant service provider.