krab-3cc[.]com

This domain, krab-3cc.com, is flagged as an active phishing threat with a high-risk classification. Infrastructure analysis reveals it was registered on March 27, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, and currently resolves to IP address 188.114.97.3, hosted on Cloudflare’s network in Canada. The domain employs Cloudflare nameservers (aleena.ns.cloudflare.com and jay.ns.cloudflare.com) and is protected by a Google Trust Services SSL certificate (WE1), indicating use of Cloudflare’s proxy services. A 301 HTTP redirect is present, suggesting the domain is designed to forward visitors to another location, though the exact destination remains unconfirmed. The domain appears on at least one security blocklist and is explicitly blocked by PhishDestroy. A Gridinsoft trust score of 0/100 further supports its malicious classification. Seven of 94 security vendors on VirusTotal have flagged this domain, though the specific detection context is not detailed. The page title, krab3.cc, may indicate a connection to another domain or campaign, but the exact nature of the phishing content or targeted brand is not yet analysed. Defenders should treat this domain as a confirmed phishing redirect and implement blocking measures at the DNS or network level. Given the use of Cloudflare’s infrastructure, monitoring for changes in resolution or SSL certificate updates may be necessary to track evolving threats. No evidence of a specific phishing kit or targeted brand is present in the available data, so additional analysis of the redirect target is recommended to determine the full scope of the threat.