ks998[.]com

The domain ks998.com is a generic phishing site designed to deceive users into disclosing sensitive information such as login credentials or personal data. It does not impersonate a specific brand or employ a known crypto drainer kit. As of the latest verification, ks998.com has been taken offline, though it previously posed an elevated risk due to its phishing activity. Users searching for whether ks998.com is safe or a scam should treat it as malicious.

Technical analysis of ks998.com reveals limited but notable detection. The domain was flagged by 2 of 95 security vendors on VirusTotal, including Gridinsoft and SOCRadar. It appears on 1 security blocklist, specifically PhishDestroy, and was registered through GMO Internet, Inc. on March 12, 2026. The domain resolves to the IP address 154.89.76.190, hosted by LUOGELANG (FRANCE) LIMITED (AS142286) in Hong Kong. No SSL certificate was observed, and the page title displayed was simply 'ks998.com'. Nameservers associated with the domain include a.share-dns.com, a3.share-dns.com, b.share-dns.net, and b3.share-dns.net.

Users who may have interacted with ks998.com should take immediate steps to secure their accounts. Change passwords for any services where credentials may have been entered, and enable two-factor authentication (2FA) where available. Monitor accounts for unauthorized activity or signs of fraud. Report the phishing domain to relevant authorities or platforms, such as Google Safe Browsing, anti-phishing organizations, or the domain registrar to aid in mitigation efforts.