krab10cc[.]com

This domain, krab10cc.com, is actively flagged as a phishing resource impersonating the legitimate site krab10.cc. Registered on December 11, 2025, through NiceNIC International Group Co., Limited, it remains operational as of July 12, 2026, with a trust score of 0/100 and presence on two security blocklists. Analysis indicates it resolves to 104.21.79.210, an address associated with Cloudflare infrastructure, which may obscure the true origin of the malicious activity. The use of HTTP/3 and Cloudflare Browser Insights suggests an attempt to mimic modern web standards while evading detection through content delivery network protections. VirusTotal reports 12 out of 95 security vendors flagging this domain, while AlienVault OTX lists it in 23 threat intelligence pulses, indicating moderate but consistent detection across multiple sources. The SSL certificate issued by Google Trust Services does not mitigate the risk, as phishing sites frequently leverage valid certificates to appear legitimate. The page title explicitly mirrors krab10.cc, reinforcing the likelihood of credential harvesting or fraudulent transaction attempts targeting users familiar with the authentic domain. Defenders should treat this domain as high-risk due to its active status, blocklist presence, and confirmed phishing classification. Network-level blocking of 104.21.79.210 and associated domains is recommended, alongside monitoring for any redirects or subdomains tied to krab10cc.com. Given the domain’s recent registration and Cloudflare obfuscation, further investigation into related infrastructure may reveal additional malicious endpoints. No evidence suggests this is part of a broader campaign, but the consistent detection across multiple platforms warrants immediate containment measures.