chremebstore-gegelemco-detail-rabbyy-ru[.]store

The domain chremebstore-gegelemco-detail-rabbyy-ru.store was observed on July 29, 2026 as an active generic phishing site. Automated scans recorded that seven out of ninety‑one VirusTotal scanners flagged the host as malicious, indicating a moderate consensus among malware analysis engines. The domain is currently listed on three independent security blocklists and has been explicitly blocked by the PhishDestroy, MetaMask, and SEAL filtering services.

No public WHOIS record or registrar information is available in the shared intelligence, and no IP address or hosting ASN has been disclosed, leaving the underlying infrastructure opaque. Safe Browsing checks from Google and other browsers have not been reported, and no Open Threat Exchange (OTX) entries are linked to the domain at this time. The HTTP response code, TLS certificate details, and page title have not been captured, so the surface‑level characteristics of the landing page remain unverified.

Analysts should treat any traffic to this domain as hostile and enforce network‑level deny rules. Endpoint protection should be configured to honor the existing blocklist entries, and any detection of the domain by antivirus or web‑gateway products should be escalated for investigation. Continuous monitoring of threat‑intel feeds for additional indicators such as IP ranges, registrar changes, or new blocklist inclusions is recommended to maintain situational awareness as the campaign evolves.