Tableau de bord analytique
⚠️
Ce domaine a été signalé comme malveillant
Detected by 3 security vendors. Exercise extreme caution — do not enter credentials or personal information. Create a complaint draft from this stored evidence, review it, and submit it yourself to the appropriate authority.
Domain security & threat intelligence

krab2[.]dev

Analyse phishing et sécurité de krab2.dev

Threat verdict Critical 74/100 evidence score
Availability Last known active Latest stored reachability observation
Risk signals
VirusTotal: 3/91 detections Spamhaus DBL: DBL_PHISH Last known active
3/91 VT Jun 15, 2026 CDN + more
Résumé du rapport

krab2.dev : 3 moteurs VirusTotal sur 91 ont signalé ce domaine. Consultez le DNS, le SSL, le bureau d’enregistrement et les listes de blocage.

L’analyse détaillée de PhishDestroy AI reste en anglais afin de préserver le relevé forensique original.

Evidence Summary
CRITICAL
Ref
940356B2
Score
74/100
Mode
Evidence v1

PhishDestroy first recorded krab2.dev on Jun 15, 2026. This English evidence brief is rebuilt from the current structured observations stored for the report. The current evidence score, computed from those stored observations, is 74/100.

The latest stored availability state is “Last known active” (HTTP 301) on Aug 2, 2026 at 00:26 UTC. This is a reachability snapshot, not proof of the cause of any outage, restriction, or status change.

VirusTotal returned 3 detections from 91 scanners in the stored check on Jul 18, 2026 at 20:45 UTC. The independent blocklist snapshot recorded 0 matches across 10 configured external sources on Aug 2, 2026 at 00:20 UTC. PhishDestroy's own listing is excluded from that count. A zero-match snapshot is not a safety verdict.

Other stored evidence. Google Safe Browsing stored no positive flag on May 28, 2026 at 07:00 UTC. This time-bound result is not evidence of safety. AlienVault OTX stored 0 pulse references on May 29, 2026 at 01:13 UTC. OTX pulses are community-intelligence references, not vendor verdicts. Spamhaus DBL stored the result DBL_PHISH on Jul 13, 2026 at 16:34 UTC.

Stored context lists registrar NICENIC INTERNATIONAL GROUP CO., LIMITED, IP address 188.114.96.3, registration date May 27, 2026. Except for the registration date, these fields do not share a source timestamp in this report and may change.

Treat these as stored, time-bound observations rather than a live safety guarantee. Source verdicts and reachability can change, and zero or missing vendor matches never prove that a domain is safe. Avoid interacting with the domain while uncertainty remains, and use the appeal process if this report is inaccurate.

Classification: CRITICAL · Stored evidence snapshot
VirusTotal
VirusTotal
3 det.
Gridinsoft
0/100
TLS certificate
Google Trust Services / WE1
Âge
2 mo New
Observed status
Last known active 301
PhishDestroy
DestroyList
Listed
Couverture des données VirusTotal 3 / 91 URLQuery not checked OTX no pulses CF Radar no data URLScan capture not submitted URLScan verdict verdict unavailable Blocs DNS not checked TLS valid certificate, 44d WHOIS 2 mo old Screenshot non capturé Chaîne de redirection not probed Gridinsoft 0/100
Renseignements sur la sécurité réseau Registrar Integrity Alert
High-Risk Registrar NiceNIC
PhishDestroy audit found that over 90% of domains registered through NiceNIC are associated with illegal content. This registrar systematically ignores abuse reports and its primary clientele consists of CIS-region scam operators. We have not identified a single legitimate project hosted on this registrar.
NiceNIC Verdict Full Investigation

Processus de réponse aux menaces Pipeline

Discovery
Checks
Reports
Availability
6/8
Découverte et ingestion préventives
Menace détectée
1/1 ✓
Menace détectée
krab2.dev détectés et mis en file d'attente en vue d'une analyse complète
Jun 15, 2026
Threat Intelligence Checks
VirusTotal · Google Safe Browsing · High-Risk Registrar: NiceNIC · Technical Analysis Recorded
4/4 ✓
VirusTotal
3 / 91 vendors flagged on VirusTotal
Jul 18, 2026
Google Safe Browsing
May 28, 2026
High-Risk Registrar: NiceNIC
90%+ illegal content — registrar ignores abuse reports. Read our verdict
Technical Analysis Recorded
The report contains stored technology or forensic-analysis results
Aug 02, 2026
Notification Records
Complaint Draft Available
PENDING
Complaint Draft Available
No submission is recorded. You can create a draft, review it, and submit it yourself to the appropriate authority.
Publication et disponibilité
DestroyList Published · Monitoring Continues
1/2
DestroyList publié
Jun 15, 2026
Monitoring Continues
The domain remains reachable or access-restricted; future checks may update this observation

Statut de la liste de blocage publique

MetaMask
MetaMask
NO MATCH
ScamSniffer
ScamSniffer
NO MATCH
Polkadot
Polkadot
NO MATCH
CryptoFirewall
CryptoFirewall
NO MATCH
OpenPhish
OpenPhish
NO MATCH
PhishDestroy
PhishDestroy
SOURCE DATASET
SEAL
SEAL
NO MATCH
Enkrypt
Enkrypt
NO MATCH
Phishunt
Phishunt
NO MATCH
Codeesura
NO MATCH
DiscordPhishing
DiscordPhishing
NO MATCH

Informations sur les domaines

Domainkrab2.dev
Server / ASN cloudflare · AS13335 Cloudflare, Inc.
IP Context Cloudflare shared edge origin IP hidden edge-IP reputation is not attributed to this domain
Registrar NiceNIC RU(RU) PhishDestroy Investigation
Registre de l'ICANNBureaux d'enregistrement officiels accrédités par l'ICANN →
Recherche WHOISICANN RDAP for krab2.dev →
IP Address 188.114.96.3 CDN
GeoCA Toronto, CA
NetworkAS13335 · CloudFlare, Inc.
Reverse IPviewdns.info → rapiddns.io →
Origin IP is hidden behind a CDN proxy. Reverse-IP on the edge IP returns unrelated tenants — origin discovery requires passive-DNS or CT cross-reference.
RegistrationCréé May 27, 2026 (66d · New) — Expires Dec 04, 2026
Statut HTTP301 Moved Permanently
Elapsed Since First Report 34 days
What we count Raw elapsed time since the first stored abuse report. It is not a registrar response-time measurement. Latest observed status: Last known active.
What each report contains Stored outgoing report records may reference evidence available at the time, such as vendor verdicts, registration data, hosting details, classifications, or screenshots. This page does not infer the exact payload delivered, receipt, acknowledgement, or action by a recipient.
Détails techniquesDNS, SAN SSL, horodatages
Première détectionJun 15, 2026
Nameservers["elijah.ns.cloudflare.com","novalee.ns.cloudflare.com"]
TLS Fingerprinta28ec461a182ecc5f87386790f3299dd1b5d8001…
ICANN OVERSIGHT

Accreditation and RAA context

L’ICANN a encaissé. La reddition de comptes n’a pas suivi.

Pour ce gTLD, le bureau d’enregistrement ci-dessus opère dans le cadre d’un contrat avec l’ICANN. L’ICANN perçoit des frais annuels, variables et liés aux transactions, associés aux enregistrements, aux renouvellements et aux transferts.

Accréditation : monétisée. Reddition de comptes : veuillez repasser plus tard.

Puis la magie commence : l’ICANN rédige le RAA §3.18, le bureau d’enregistrement enquête sur les abus au sein de sa propre clientèle, et les victimes fournissent gratuitement les preuves pendant que chaque niveau attend qu’un autre agisse. Si cela rassure les victimes, excellent — la facture a fonctionné.

Une accréditation est un contrat, pas un label de sécurité. Vérifier les frais de l’ICANN Lire le RAA §3.18 PHISHDESTROY INVESTIGATIONLe cartel ICANN : 155 M$ pour des contrats bafoués
Note satirique sur la responsabilité Rien n’est envoyé automatiquement.
Signaler ce domaine Envoyez des éléments de preuve et contribuez à protéger les autres

Analyse VirusTotal

3 / 91 security vendors flagged this domain
View on VT
Forcepoint ThreatSeeker
Fortinet
Gridinsoft

Données factuelles et rapports externes

Analyse de sécurité
VirusTotal 3 det. ChainPatrol URLQuery Open lookup Gridinsoft 0 trust SSL Labs Valid TLS WOT ScamAdviser Vérificateur de liste noire URL nulle Sucuri SiteCheck Observatoire MDN
OSINT et renseignement
Web-Check Full scan Shodan Censys ThreatFox Hudson Rock IntelX crt.sh Certs WHOIS Wayback
DNS et réseau
nslookup.io DNS bgp.tools ASN/Route
Référencement naturel et nom de domaine
SpyFu Moz DA/PA Ahrefs Backlinks Analyse approfondie

Ce site vous a-t-il affecté ?

Vous n'êtes pas seul(e) et il n'y a pas de quoi avoir honte. Les escrocs sont des criminels rusés qui abusent de la confiance des gens. Signaler ce que vous avez subi est l'arme la plus efficace contre la fraude : votre signalement peut empêcher d'autres personnes d'en être victimes et aider les forces de l'ordre à intervenir. Le silence est le plus grand atout de l'escroc. Casse-le.

If you entered account credentials, personal or payment information, or downloaded a file from this domain, take immediate action. Below are resources to help you report the incident and protect yourself.

Europol
Find the official reporting channel for your EU country
National police directory
PhishDestroy listing review Not a law-enforcement report
Recours en matière de nom de domaine
Request a review if you own this domain and believe the listing is incorrect
Méfiez-vous des escrocs qui prétendent vous aider à récupérer vos biens ! Criminals may contact victims again while pretending to be investigators, lawyers, or recovery agents. Do not pay upfront fees or share credentials. En savoir plus sur la fraude liée aux aides à la reprise →

Signalez-le à vos autorités locales

Sélectionnez votre pays pour obtenir interlocuteurs officiels en matière de cybercriminalité, or create a complaint draft →

Sélectionnez votre pays...
97-country directory
Zero-PII — vos données ne quittent jamais le navigateur Review and submit it yourself

Related Infrastructure & Reports

Stored relationships are grouped by the exact matching attribute. A shared provider or registrar alone does not prove common ownership; recent reports are labeled separately for discovery.

Other reports on shared Cloudflare edge 6

These reports resolve to the same shared edge IP. They are useful for report discovery but do not imply common ownership or a shared origin server.

user6.invoice-partners-agency.com favicon user6.invoice-partners-agency.com 26 VT member.invoice-partners-agency.com favicon member.invoice-partners-agency.com 25 VT user13.invoice-partners-agency.com favicon user13.invoice-partners-agency.com 25 VT username8834.invoice-ads-agency.com favicon username8834.invoice-ads-agency.com 25 VT t-mobile.rmlcws.top favicon t-mobile.rmlcws.top 25 VT dash-spotifycostumerportal-port-premuim.ownership-assets.net favicon dash-spotifycostumerportal-port-premuim.ownership-assets.net 25 VT

Same registrar: NiceNIC 6

yield-farming.io favicon yield-farming.io trumpbrad.net favicon trumpbrad.net 4 VT barcode-hive.com favicon barcode-hive.com bnb-casinos.net favicon bnb-casinos.net gslintegrityone.com favicon gslintegrityone.com matbet9905.icu favicon matbet9905.icu

Recent threat reports 6

Recently added reports from the PhishDestroy database. These discovery links do not imply shared infrastructure or ownership.

jefelon.cc favicon jefelon.cc 4 VT x-casino.world favicon x-casino.world 20 VT zombiecheats.com favicon zombiecheats.com 5 VT rlcounsel.com favicon rlcounsel.com 7 VT zimbrastat.com favicon zimbrastat.com 20 VT zimbrasoft.com.ua favicon zimbrasoft.com.ua 20 VT

About This Report: krab2.dev

This report presents the latest stored evidence available to PhishDestroy. Source timestamps are shown where available; availability and vendor verdicts can change after collection.

krab2.dev has been flagged by 3 security vendors as of August 2, 2026.

Si vous estimez que cette annonce est inexacte, vous pouvez introduire un recours. Pour plus d'informations sur notre méthodologie, rendez-vous sur notre Page FAQ.

Vérifier n'importe quel domaine

Threat analysis using stored blocklist, WHOIS, DNS, and public scan evidence

Scanner maintenant

Signaler une tentative d'hameçonnage

Signalez les domaines suspects à notre base de données des menaces — protégez la communauté

Report

Flux d'alertes en temps réel

Recent phishing reports and observed availability changes

Monitor

Restez informés, restez en sécurité

Surveillez les menaces en temps réel ou signalez cette alerte si vous pensez qu'il s'agit d'un faux positif

Flux d'alertes en temps réel Contester cette annonce
HTML · IFRAME

Intégrer ce rapport

Partagez ces informations sur les menaces sur votre site web ou votre blog

embed.html 
<iframe
  src="https://phishdestroy.io/fr/embed/domain/krab2.dev"
  title="PhishDestroy threat report for krab2.dev"
  width="100%" height="320"
  loading="lazy"
  referrerpolicy="no-referrer"
  sandbox="allow-same-origin allow-popups allow-popups-to-escape-sandbox"
  style="border:0;border-radius:12px;max-width:100%"
></iframe>

Une lettre de remerciement très sincère

Générateur de brouillon satirique

Destinataire
Contexte des frais

Brouillon satirique. Les montants des frais sont des estimations ; aucune attribution exacte à ce domaine n’est affirmée.