at-krab10[.]cc

PhishDestroy identifies at-krab10.cc as an active fake Krab phishing domain designed to deceive users into entering sensitive credentials or payment details. This domain leverages a recently registered name (December 11, 2025) and a Google Trust Services SSL certificate to appear legitimate. The infrastructure is hosted on IP 188.114.96.3 and was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar often associated with high-risk domains. VirusTotal confirms this threat with only 3 out of 95 security vendors flagging it, highlighting the stealthy nature of the phishing operation.

This domain poses an elevated risk due to its active status and the use of social engineering tactics to impersonate a well-known brand. The combination of a newly registered domain, low detection rates, and a trusted SSL certificate creates a dangerous illusion of legitimacy. Users interacting with this site may unknowingly expose personal data, financial information, or login credentials to threat actors. The domain’s short lifespan and low blocklist count suggest it is a recent campaign, likely targeting unsuspecting victims through phishing emails, malicious ads, or compromised links.

If you visited at-krab10.cc, immediately cease any interaction with the site and avoid entering personal or financial information. Check your accounts for suspicious activity, especially if you submitted credentials. Use a reputable antivirus tool to scan your device for malware or unauthorized access. Report the domain to your security team or relevant authorities to help mitigate further risks. For a detailed analysis, consult the full threat report to verify the domain’s status and indicators of compromise.