krab-20[.]cc

Analysis of the domain krab-20.cc shows a recent registration on March 28, 2026 through NICENIC INTERNATIONAL GROUP CO., LIMITED. The domain is delegated to Cloudflare infrastructure, using the authoritative nameservers asa.ns.cloudflare.com and bob.ns.cloudflare.com. VirusTotal scans reported that two of ninety‑four security vendors flagged the domain, indicating a low but non‑zero detection rate.

An HTTP request returned a 403 status code, confirming that the site is currently inaccessible and consistent with the offline status reported by threat‑intel sources. The domain appears on a single security blocklist and has been explicitly marked as blocked by the PhishDestroy mitigation platform. No page title, content snapshot, or Safe Browsing verdict is available, and the specific brand or service being impersonated has not been disclosed in the collected intelligence.

Consequently, the precise phishing lure remains uncertain. Defenders should treat the domain as hostile: add krab-20.cc to corporate DNS and proxy blocklists, monitor for any resolution attempts, and incorporate the indicator into intrusion‑detection signatures. Continuous re‑evaluation is advised, as future scans may reveal additional vendor detections or content analysis that could clarify the targeted brand and attack vector.