krab-2-cc[.]com

The domain krab-2-cc.com was created on February 21, 2026 through NiceNIC International Group Co., Limited and is currently active. It is delegated to the Cloudflare nameservers aleena.ns.cloudflare.com and jay.ns.cloudflare.com, and resolves to IP address 104.21.21.123, which is owned by AS13335 Cloudflare, Inc. and geolocated in the United States. The site presents an SSL certificate issued by Google Trust Services under the WE1 certificate authority, indicating proper TLS termination at the Cloudflare edge. An HTTP 301 response redirects clients to a target that returns a page title of "Page Not Found — 404," confirming that the observable landing page is a generic error page rather than a visible phishing form. Detected infrastructure components include Cloudflare Browser Insights, Cloudflare services, and HTTP/3 support, reflecting a typical Cloudflare‑protected hosting stack.

Reputation signals show a Gridinsoft trust score of 0 out of 100, and the domain is listed on a single security blocklist. PhishDestroy has actively blocked the domain, and VirusTotal reports that 4 of 93 security vendors have flagged it as malicious, reinforcing the suspicion of phishing activity. No additional contextual information about the phishing payload or targeted brand is available from the current intelligence.

Defenders should prioritize immediate DNS‑level blocking of krab-2-cc.com and enforce URL filtering on corporate web gateways. Given the Cloudflare edge hosting, traffic inspection at the network perimeter may be required to capture redirected requests before TLS termination. Continuous monitoring of Cloudflare’s threat intelligence feeds for related sub‑domains and rapid updates to intrusion detection signatures are recommended.