kpab9[.]cc

As of July 12, 2026, the domain kpab9.cc is flagged as a high-risk, active phishing site. This domain was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED on March 28, 2026, and currently resolves to the IP address 188.114.96.3. The page title found is 'krab9.cc - Новая Рабочая Ссылка на сайт', which suggests the site is presenting itself as a new working link. The SSL certificate is issued by Google Trust Services, which may be an attempt to appear more legitimate to potential victims. Gridinsoft has assigned this domain a trust score of 0 out of 100, indicating a complete lack of trustworthiness. The domain is mentioned in 22 threat intelligence pulses on AlienVault OTX, further corroborating its malicious nature. It appears on two security blocklists and is actively blocked by PhishDestroy and BLP-Malware. Given the high risk level and active status, defenders should consider blocking access to this domain and alerting users to avoid visiting it. The use of Cloudflare technologies, including Cloudflare Browser Insights and HTTP/3, suggests the site may be leveraging these services to enhance its operational resilience and user experience, potentially to better disguise its malicious intent.