krab--20[.]cc

This domain is flagged as a high-risk generic phishing threat. Infrastructure analysis shows the domain resolves to IP 188.114.97.3, hosted behind CloudFlare, Inc. in Canada, with nameservers roxy.ns.cloudflare.com and yevgen.ns.cloudflare.com. The SSL certificate is issued by Google Trust Services (WE1). The domain was registered on March 26, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar often associated with questionable registrations. VirusTotal reports 5 of 94 security vendors flagging this domain, and it appears on one security blocklist, consistent with active phishing activity. The page title is confirmed as 'krab20.cc', though the specific brand or target of the phishing attempt is not identified from the available data. The Gridinsoft trust score of 0/100 and blocking by PhishDestroy further corroborate malicious intent. The domain remains active as of this report. Defenders should block access to this domain and monitor for any related subdomains or IPs associated with the same infrastructure, as the use of CloudFlare and a recent registration suggests an attempt to evade takedowns. No other concrete evidence is available to determine the exact scam type or page content beyond the generic phishing classification.